US Representative Office of Resona Bank Privacy Notice

Effective Date / Last Updated: April 25, 2025

This Privacy Notice (the “Notice”) describes how the Resona Bank Group’s United States Representative Office (“Resona Bank US,” “we,” “us,” or “our”) may collect, process, use, and disclose your personal information, which is information that either identifies you or is about you (“Personal Data”). The Resona Bank Group may include, but is not limited to, Resona Bank Ltd., Saitama Resona Bank, Kansai Mirai Bank, and Minato Bank.

This Notice also describes your rights around your Personal Data and how you can exercise them. We may update this Notice from time to time. Any updates will be reflected by the date at the top of this Notice and will become effective when we post the updates on this site or otherwise notify you of such updates. Your use of our website, products or services or ongoing interactions with us in a business context following any update to the Notice means that you accept the updated Notice and consent to the use and disclosure provisions identified in the Notice.

This Notice does not apply to third-party websites where our online advertisements are displayed or to linked third-party websites we do not operate or control. These websites should have their own privacy notices, which you can read to understand how they collect and process your Personal Data and your rights.

If you have questions or concerns about this Notice or our Personal Data handling practices, please refer to the Contact Us section below for the contact details for Resona Bank and Resona Bank US.

We may collect your Personal Data:

• Directly from you.
• From publicly available sources.
• From people you know, such as family members, joint account holders, referees, and people you appoint to act on your behalf.
• From businesses and organizations such as your employer, financial institutions, credit agencies, and regulatory authorities.
• With cookies and similar technologies. When you visit, browse, or use our website or applications, we may use cookies to automatically collect certain information from your device. We use this information for internal analysis and troubleshooting, to recognise you and remember your preferences, to improve the quality of and to personalise our content, and to determine the security status of your account. We may use cookies to anonymously track interest in and collect aggregate information when you use our products or services.

With respect to our corporate client relationships, we may collect Personal Data about directors, officers, employees, beneficial owners, and authorized persons needed to enable us to meet our legal obligations and service our clients or otherwise engage in legitimate business activities. If you are providing Personal Data of another individual, you must have their permission and explain to them how we will use it.

We may collect the following Personal Data, depending on your relationship with us, and only if relevant and permitted by applicable law.

From consumers, website visitors, and business contacts

• Identifiers, including your name, contact information, date of birth, business affiliation, identification numbers such as education, profession, and income level.
• Characteristics of protected classifications, including gender.
• Commercial information, including Resona Bank products and services you utilize or may utilize.
• Internet or other electronic network activity information, including pages viewed, your IP address, non-specific geolocation data, browser type, and operating system.
• Relationship data, including information about associations or close connections between individuals or entities (e.g., immediate family, employer).

We may need to collect more sensitive Personal Data from you, but we only do this if necessary and where allowed by law. This sensitive data may include your financial and banking information, driver’s license number, or citizenship.

From job applicants and employees

• Identifiers, including name, contact details, photograph, driver’s license, social security number, or passport.
• Payroll and benefits information, including salary, bank account details, and employment benefits. This may also include immediate family member Personal Data and leaves of absence.
• Characteristics of protected classes, including racial or ethnic origin, gender, citizenship, and maternity leave details, and the following, but only to the extent provided voluntarily: disability information, veteran or military status, religious or philosophical benefits, and sexual orientation.
• Biometric information.
• Internet and other electronic network activity, including information about the systems to which you have access, your IP address, log files, login information, software/hardware inventories, and information collected by internal applications and security controls.
• Recruitment information, including resume/CV, application forms, past employment, immigration status, residency permits and visas, national ID, and other documentation around eligibility for employment.
• Professional information, including employee status, qualifications, position, employment contract, performance evaluations and disciplinary records, training, and organization information.
• Education information, including education, training, degrees, and professional certifications.
• Inferences drawn from the information collected, such as preferred language and salutation.
• Other Information, including leave of absence and work-related accidents information.

Certain Personal Data may be considered Sensitive Personal Data within the meaning of California Privacy Law, including a social security number (collected for tax, compliance and payroll-related purposes); a driver's license number and passport number (collected for safety, compliance and travel-related purposes); a bank account number or financial account number (collected for payroll and expense-related purposes); racial or ethnic origin, religious or philosophical beliefs, union membership, and information about sexual orientation (collected for inclusion, diversity, compliance and related purposes); health/medical information (collected for benefits, sick leave, and related purposes), and biometric information (for secure access to facilities). Resona Bank US only uses and discloses sensitive Personal Data as necessary to provide benefits, to perform the employment contract, to comply with federal, state, or local laws, and otherwise as permitted by law.

We may collect and process your Personal Data to provide and manage products, services, and benefits, manage our relationship or employment relationship with you, operate our business, improve our products and services, keep you and others safe, detect and prevent financial crimes, to comply with applicable law, to exercise our legal rights, and to facilitate mergers, acquisitions, and divestitures. If you have or are associated with more than one account with Resona Bank, we may link all your accounts and Personal Data to enable us to have an overall picture of our relationships.
We may not be able to offer or provide our products and services if you do not want us to process the Personal Data that we consider is necessary. We process your Personal Data with your consent where required by law and for the following lawful reasons: (i) contractual obligations; (ii) legal obligations to comply with laws and regulations; and (ii) when it is within our legitimate interest. We may use your contact details to send relevant marketing communications, if allowed by applicable law or with your consent. You may withdraw your consent at any time by contacting us using the details below.

Federal financial privacy laws and regulations gives you the right to limit certain disclosures of your Personal Data related to affiliates’ everyday business purposes related to your creditworthiness; affiliates directly marketing to you; and nonaffiliates marketing to you. State laws may give you additional rights. Additional privacy notices required under federal or state laws or regulations will be provided to you separately from this Notice. You may contact us using the details below for additional information.

We may use the Personal Data we collect to conduct data analytics, including profiling and behavioural analysis, to make quicker automated decisions in our business operations and to evaluate your personal characteristics to predict outcomes and risks. We may use artificial intelligence and machine learning to help improve our communications and client experience, make our business operational processes safer and more efficient and enable us to provide faster responses and improve turnaround time.

We may disclose your Personal Data within Resona Bank and with our affiliates for the purposes set out in this Notice. We may also disclose your Personal Data with service providers, business partners, other third parties, and as required by law. We may disclose your Personal Data as follows:

• With our service providers, including auditors, legal counsel, insurance brokers, forensics investigators, management consultants, and third-party product providers.
• With authorized third parties, including family members, legal guardians, joint account holders, trustees, beneficiaries, executors, or authorised persons of our clients, or any other person you have authorised.
• With credit bureaus or credit reference agencies, debt collection agencies, and fraud prevention agencies.
• With strategic referral partners that we cooperate with based on contractual arrangements.
• With other financial institutions, such as correspondent banks, payment service providers, and market infrastructure providers.
• With government and law enforcement as required by law.
• With third parties in the case of a merger, acquisition, or divestment.

We have not and will not sell or share your Personal Data for cross-contextual advertising purposes. We have no actual knowledge of selling or sharing Personal Data of anyone under 16 years of age.

We may transfer your Personal Data within Resona Bank or with other third parties for the purposes described in this Notice. This may involve storing, disclosing, and transferring your Personal Data cross border to other jurisdictions. When local laws do not have similar data protections as the jurisdiction where you reside or we have a relationship, we take all reasonable steps necessary to ensure that your Personal Data has an appropriate adequate level of protection and safeguards to comply with applicable law.

We have put in place a range of technical, physical, and organisational measures to protect and keep your Personal Data confidential. We have implemented information security policies, rules, and technical measures to protect Personal Data and to comply with legal and regulatory requirements. We train and require staff who access your Personal Data to comply with our data privacy and security standards, and we require our service providers, or other third parties we engage with and to whom we disclose your Personal Data to implement similar confidentiality, data privacy and security standards and measures when they manage, access, or process your Personal Data.

We keep your Personal Data for business or legal reasons when you are engaging with us and for a period afterwards for the purposes described in this Notice and in accordance with our data retention policy standards and applicable law. We will delete, anonymise, destroy, and/or stop using Personal Data when we no longer need it.

You may have certain data protection rights based on your place of residence, including:

• Right to access your data.
• Right to correct your data.
• Right to ask us to delete your data; however, there may be times when we must retain certain data under various exceptions to this deletion right.
• Right to restrict or object to certain processing activities.
• Right to object to automated decision making.
• Right to data portability to allow you to take your Personal Data to another organization in a machine-readable format.
• Right to change or withdraw your consent.
• Right to withdraw from direct marketing.

If you have questions or wish to exercise your rights in line with applicable law, contact us using the details below. We will not discriminate against you by offering you different pricing or products or providing a different level of quality should you choose to exercise your rights.

When exercising any of these rights, please provide us with information to assist us to verify your identity, which may include your name, email address, or telephone number.

You may appoint an authorized agency to make a request on your behalf. We may ask your authorized agent to verify their own identity, and we may request that the authorized agent provide us with written permission signed by you demonstrating that you have authorized the agent to act on your behalf.

If you have any questions or concerns about how we are using your Personal Data, please contact us as below:

Resona Bank, Limited. Los Angeles Representative Office
TEL: 888-808-1041
E-MAIL: los.angeles@resonabank.co.jp