ORIX Real Estate Investment Advisors Corporation (“ORIA”) engages in the management and other related operations of assets entrusted to it pursuant to the Financial Instruments and Exchange Act, the Act on Securitization of Assets, and other applicable laws and regulations, in order to meet the needs of various stakeholders, including customers in Japan and overseas (the “Business”).
In conducting the Business, ORIA may acquire personal information of stakeholders, including sellers, purchasers, tenants, and other related parties (collectively, the “Stakeholders”) in relation to real estate, trust beneficiary interests, and other assets (collectively, “Properties”), by the methods set forth in Section 5, “Methods of Acquiring Personal Information.”
ORIA recognizes the personal information of Stakeholders as a highly important information asset and collects it by lawful and fair means. ORIA also uses, manages, and protects such information appropriately in accordance with the following provisions.
This Privacy Policy discloses the purposes for which ORIA uses personal information and explains how ORIA handles such personal information.
1. Legal Compliance
ORIA recognizes the need for, and is fully committed to, ensuring that all officers and employees are fully aware of and comply with laws and regulations regarding the processing of personal information in order to protect personal information ORIA processes and ensures its safety.
2. Continuous Improvement of Compliance Program
ORIA has established a compliance program that includes elements relating to the processing of personal information and periodically reviews those elements and strives to continuously improve them.
3. Scope of Application
This Privacy Policy applies to all personal information that ORIA processes in all countries and regions where ORIA has business operations.
For details about ORIA’s use of cookies, please refer to its “Cookie Policy”(https://www.orix.co.jp/oria/en/sitepolicy/)
4. Types of Personal Information
ORIA collects and processes the following personal information regarding Stakeholders.
- 1.Contact information: name, address, telephone number, fax number, and email address;
- 2.Identifying information: date of birth (age), gender, nationality, place of origin, residence, licenses, photographs, passport, visas or other government-issued identification data, background (education, job history, etc.), company name, job title, and family structure;
- 3.Other information about Stakeholders: customer code number, registered seal, or any other description;
- 4.Audio and video information: The content of calls made to ORIA to when making inquiries and images from security cameras when at ORIA’s properties;
- 5.Financial information: invoice address, credit or debit card number or other payment-related data, and bank account information;
- 6.Details regarding inquiries of the Business;
- 7.Locational information and actions on networks: IP address, mobile device locational information, access information for our home page, device settings, log information, usage time, browser version information, operating system, browsing history, user ID, types of information viewed, and cookie and similar data;
- 8.Credit information: Information that must be collected pursuant to relevant laws and regulations, such as information for identity confirmation purposes; and
- 9.Any other information Stakeholders elect to provide directly to ORIA in connection with the Business.
5. Methods of Acquiring Personal Information
ORIA collects personal information of Stakeholders through the following means:
- 1.Information provided by Stakeholders: acquired though face-to-face, telephone, mail and e-mail interactions, acquired through the filing out of applications, contracts, online forms, and questionnaires;
- 2.Information provided by others: acquired through business associates, subcontractors, business partners, company-operated stores, franchise stores, and service providers, etc.;
- 3.Technical information acquired during the use of services; and
- 4.Information acquired as a result of merger and other transactions that result in business succession.
Stakeholders may refuse to provide personal information to ORIA but the decision not to provide certain personal information to ORIA may result in ORIA not being able to provide certain products, services (including the Business) and any other benefit to such Stakeholders.
6. Proper Acquisition
ORIA will not acquire personal information through improper means.
7. Legal Basis for Processing
ORIA’s legal basis for processing personal information of Stakeholders will typically be one of the following.
- 1.Stakeholders’ consent;
- 2.Necessary for implementing the affairs of the Business;
- 3.Necessary for ORIA to fulfill its legal obligations;
- 4.Necessary to protect vital interests; or
- 5.Required for ORIA’s legitimate interests or those of a third party, provided that if such interests are overridden by interests or fundamental rights and freedoms of Stakeholders, ORIA will not process personal information of Stakeholders. ORIA’s legitimate interests are specified in more detail in Section 8 “Purpose for Processing of Personal Information” below.
8. Purpose for Processing of Personal Information
-
1.ORIA may process personal information of Stakeholders (including former stakeholders to the extent necessary to achieve the purpose of processing; the same shall apply hereinafter in this Privacy Policy) within the scope of the purposes set forth below.
- ①To conduct operations relating to the management of assets entrusted to ORIA.
- ②To contact Stakeholders and respond to inquiries from Stakeholders or requests for materials.
- ③To report management results, asset balances, transaction results, and other matters to entrustors of asset management.
- ④To carry out ORIA’s settlement of accounts and other accounting and tax-related operations.
- ⑤To seek advice from professionals, including attorneys, certified public accountants, certified tax accountants, real estate appraisers, judicial scriveners, and licensed social insurance consultants, etc.
- ⑥To conduct operations incidental or related to the preceding items.
- ⑦To provide personal information to third parties in order to achieve the purposes set forth in the preceding items. Such third parties may include financial institutions with which entrustors of asset management conduct transactions, non-life insurance companies, professionals, real estate brokers, property management companies, prospective purchasers or tenants of Properties, information processing companies, research companies, and other similar parties.
-
Notwithstanding the foregoing, the following purposes of processing shall apply to the personal information of job applicants:
- ①To conduct screening for internships and recruitment selection, including interviews, examinations, and similar procedures.
- ②To conduct ORIA’s recruitment activities, including providing information on seminars and other matters related to recruitment activities, communicating with applicants, and using questionnaires and similar materials for reference in future recruitment activities.
- ③With respect to the personal information of persons hired as a result of recruitment selection, to manage such information as part of ORIA’s personnel records after they join ORIA, for all purposes relating to human resource development, employee benefits, and other personnel management.
- ④To conduct statistical and data analysis for recruitment operations.
-
2.Restriction due to Purpose of Processing
ORIA will not handle personal information beyond the scope necessary for achieving the purposes of processing specified as in any of items in paragraph 1 in Section 8 “Purpose for Processing of Personal Information” without prior consent of Stakeholders or except as admitted by laws and regulations.
-
3.Change of Purpose of Processing, etc.
In the event that ORIA is to change the purposes of processing specified in paragraph 1 and 2 in Section 8 “Purpose for Processing of Personal Information”, the method or means of provision to third parties and such, ORIA will promptly disclose the content of changes except for the cases below.
- ①When the notification or disclosure of the purpose of processing to the Stakeholders concerned poses a risk of damage to the life, health, property, or other rights and interests of the Stakeholders or a third party.
- ②When the notification or disclosure of the purpose of processing to the Stakeholders concerned poses a risk to ORIA’s rights or legitimate interests.
- ③When it is necessary to cooperate with a national agency including administrative agencies, judicial courts, etc. or a local government in implementing the affairs prescribed by laws and regulations and notifying or disclosing the purpose of processing to the Stakeholders is likely to impede such implementation.
- ④When it is considered that the purpose of processing concerned is obvious in the circumstances of the acquisition.
-
4.Accurate Retention
ORIA will endeavor to keep the content of personal information accurate and up to date within the scope necessary for the achievement of the purpose of processing.
9. Protection and Management of Personal Information
ORIA has established internal rules and regulations on the protection of personal information and pays the utmost attention to managing personal information appropriately and protecting against leakage of such personal information. ORIA has also implemented appropriate and reasonable levels of safety measures to protect against unauthorized access, loss, destruction, or alteration of personal information from outside the company.
10. Provision of Personal Information to Third Parties
ORIA will not provide personal information of Stakeholders to third parties (parties that have been entrusted with handling of personal information in whole or in part, and parties who are provided with the personal information when they succeed to a business of the business operator due to a merger or other such circumstances do not constitute third parties in this section) with the exception of cases set forth below.
- ①When the Stakeholder’s consent has been obtained.
- ②When the provision of personal information is based on laws and regulations.
- ③When the provision of personal information is necessary for the protection of life, body or property (including property of corporations) of the Stakeholders and it is difficult to obtain the consent of the Stakeholders.
- ④When the provision of personal information is especially necessary for improving public health or promoting the sound growth of children and it is difficult to obtain the consent of the Stakeholder.
- ⑤When the provision of personal information is necessary for cooperating with a national agency, a local government or an individual or a business operator entrusted by either of the former two in implementing the affairs prescribed by laws and regulations and obtaining the consent of the Stakeholder is likely to impede such implementation.
ORIA’s website may from time to time contain links to and from websites of its business partners. Please be aware that each of these websites has its own privacy policy and ORIA has no control over how each business partner uses personal information that it receives from Stakeholders. Prior to providing personal information to any of ORIA’s business partners, please confirm the privacy policy of the relevant third party’s website.
11. Supervision of Employees
When having an employee handle personal information, ORIA will establish appropriate internal management system, and exercise the necessary and appropriate supervision over that employee, such as obtaining from that employee a pledge which obliges him or her to keep personal information confidential, so as to ensure the security management of personal information.
12. Supervision, etc. of Subcontractors
When entrusting all or part of handling of personal information, ORIA will conduct necessary and appropriate supervision of the subcontractor so that the personal information entrusted will be safely managed.
The entrusting of handling of personal information by ORIA will be conducted within the scope necessary for the achievement of the purposes of processing set forth in Section 8 “Purpose for Processing of Personal Information”.
13. Transfers to a Third Country
Personal information of Stakeholders may be transferred to and processed in a country or region other than the one where Stakeholders are located by ORIA or a third party described in Section 10 “Provision of Personal Information to Third Parties” of this Privacy Policy for the purposes set forth in Section 8 “Purpose for Processing of Personal Information” of this Privacy Policy. Such countries and regions include countries that have different standards of data protection than those of the country where Stakeholders are located. ORIA will take all reasonable steps required by applicable law, including the execution of appropriate contracts, to ensure that personal information of Stakeholders is handled in a safe and secure manner and in accordance with this Privacy Policy and applicable data-protection laws and regulations.
14. Stakeholders’ Rights
Stakeholders can exercise the following rights to the extent permitted by laws and regulations of the country or region in which Stakeholders reside.
-
1.Notice of intended use of personal information
Stakeholders can request ORIA inform them of the intended use for Stakeholders’ personal information that ORIA possesses. In the event Stakeholders make such a request, ORIA will respond to the request promptly and appropriately in accordance with applicable laws and regulations. -
2.Access to personal information
Stakeholders have the right to verify whether or not ORIA processes personal information about them and, if ORIA processes such personal information, Stakeholders have the right to request access to it. Stakeholders also have the right to obtain a copy of their personal information that ORIA processes. In the event Stakeholders request ORIA disclosure personal information to them, ORIA will respond to the request promptly and appropriately in accordance with applicable laws and regulations. -
3.Correction of personal information
If personal information of Stakeholders is inaccurate or incomplete, Stakeholders have the right to request that ORIA correct, supplement or otherwise complete such personal information ("Rectify"). In the event Stakeholders request ORIA Rectify personal information, ORIA will respond to such request promptly and appropriately in accordance with applicable laws and regulations. -
4.Deletion of personal information
Stakeholders have the right to require ORIA to delete any of their personal information that ORIA processes. Provided, however, that ORIA is not obligated to take such action if retention of such personal information is necessary to comply with legal obligations or to assert, enforce or defend its legal rights. -
5.Restrictions on the processing of personal information
If personal information of Stakeholders processed by ORIA is inaccurate, the processing by ORIA is illegal or it is no longer necessary for ORIA to process the personal information for a particular purpose, Stakeholders have the right to restrict the processing of personal information. However, if ORIA is unable to delete their personal information due to the need to comply with legal or other obligations or Stakeholders do not request deletion of their personal information, ORIA is not obligated to take such action. -
6.Data portability
If personal information of Stakeholders is (1) personal information provided to ORIA by the Stakeholders, and (2) ORIA processes such personal information based on Stakeholders’ consent or in order to perform a contract with Stakeholders, Stakeholders have the right to obtain the personal information held by ORIA with respect to Stakeholders in a structured, commonly used and machine-readable format and the right to transmit such personal information to another controller. Stakeholders also have the right to have ORIA directly transmit such personal information to another controller, where technically feasible. -
7.Withdrawal of consent
If Stakeholders consent to processing of their personal information, Stakeholders have the right to withdraw their consent at any time without charge. This includes cases where Stakeholders wish to stop receiving marketing communications. -
8.Complaints
Stakeholders have the right to file a complaint about the processing of personal information by ORIA.
If Stakeholders wish to exercise the right described above, please contact ORIA through the e-mail address listed in Section 19 “Contact Information for Inquiries about Personal Information” of this Privacy Policy. In order to respond to Stakeholder’s request and protect Stakeholders’ privacy and security, ORIA may request Stakeholders provide information necessary to confirm Stakeholder’s identity. In cases where ORIA is unable to confirm their identity based on the information that ORIA receive from Stakeholder and information in its possession, ORIA may request Stakeholder provide additional information. ORIA is committed to responding to Stakeholder’s request to exercise their rights in accordance with applicable laws and regulations.
If Stakeholders believe that ORIA is not in compliance with applicable laws and regulations on the protection of personal information, Stakeholders have the right to file a complaint with the competent supervisory authority with oversight over data protection in accordance with applicable laws and regulations.
15. Retention Period for Personal Information
ORIA will generally only retain personal information it collects for a period of time reasonably necessary to achieve the particular business purposes for which ORIA collected the personal information. In some cases, ORIA may need to retain personal information for longer periods of time pursuant to laws or regulations applicable to its business. Personal information that is no longer needed will be promptly deleted.
16. Compliance, etc. with Related Laws and Regulations, etc
ORIA recognizes that protecting personal information and maintaining its security requires sufficient understanding of and compliance with Act on the Protection of Personal Information, and other related laws and regulations, norms, etc., and shall ensure the compliance for this aim. Also, ORIA shall appropriately respond to complaints and claims concerning the protection of personal information.
17. Continued Improvement of Privacy Policy
ORIA shall comply with this Privacy Policy and shall review as needed and work toward its continued improvement going forward. Also, when changes are to be made to the Privacy Policy as a result of such reviews, the content shall be posted on this website or in other ways, provided that changes of purposes of processing of personal information will be implemented as prescribed in paragraph 3 in Section 8 “Purpose for Processing of Personal Information”.
18. Party Responsible for Handling Personal Data (Controller)
ORIX Real Estate Investment Advisors Corporation.
19. Contact Information for Inquiries about Personal Information
Inquiries and proposals concerning the content of this Privacy Policy can be made at the following contact address. However, depending on the content of inquiries and proposals, ORIA may request that the inquiries and proposals be in writing, and need to confirm that they are from the Stakeholder him/herself. Also, please note that depending on the content of inquiries and proposals, there may be cases where responses cannot be made in light of the provisions of Financial Instruments and Exchange Act, Act on the Securitization of Assets, and other related laws and regulations, and where ORIA may require payment of a set fee.
ORIX Real Estate Investment Advisors Corporation.
General Planning Department
Reception hours: 9:00 to 17:00 except Saturdays, Sundays, holidays (including compensatory holidays) and year-end and New Year holidays
TEL: +81-3-5776-3327+81-3-5776-3327
FAX: +81-3-5776-3329
Email address: oria_info@oria.orix.jp
20. Customer Complaints Office at Authorized Personal Information Protection Organization
ORIA is a covered company of Investment Management Association of Japan , which is a personal information protection organization authorized based on Act on the Protection of Personal Information. The Association handles consultation and complaints regarding the handling of personal information by its covered companies.
Investment Management Association of Japan
Membership Audit Department Investor Consultation Office
Reception hours: Monday to Friday 9:00 AM – 11:30AM,12:30PM – 5:00PM (Excluding national holidays and the year-end/New Year period.)
TEL: +81-3-6821-8756+81-3-6821-8756
Internet address: http://www.imaj.or.jp/
Changes to this Privacy Policy:
This Privacy Policy may be updated. The date on which this Privacy Policy was most recently updated is noted below.
Last modified: June, 9th, 2026
