ORIX Auto corporation (“ORIX”) is committed to building strong trusting relationships by providing ORIX Group's quality services toward the various needs of our stakeholders, including our customers not just in Japan but also those overseas in the Americas, Europe, Asia, Oceania and the Middle East. To this end, we ensure our collection of personal information is conducted in an appropriate manner that is in compliance with laws and regulations and treat, manage, and protect this information as our most valuable asset, in accordance with the disclosure below.
This Privacy Policy (this “Policy") discloses the purposes for which we process personal information and explains regarding our processing of such personal information.
We recognize the need for, and are fully committed to, ensuring that all officers and employees are fully aware of and comply with laws and regulations regarding the processing of personal information in order to protect personal information we process and ensure its safety.
We have established a compliance program that includes elements relating to the processing of personal information and periodically review those elements and strive to continuously improve them.
This Policy applies to all personal information that we process in all countries and regions where we have business operations.
For details about our use of cookies, please refer to our “Cookie Policy.”
We collect and process the following personal information.
We collect personal information through the following means:
Individuals may refuse to provide personal information to us but the decision not to provide certain personal information to us may result in ORIX not being able to provide certain products and services to such individual.
ORIX’s legal basis for processing your personal information will typically be one of the following.
ORIX may process your personal information that we collect for the following purposes. If we seek to process your personal information in ways that exceed the scope necessary for achieving these purposes, we will obtain your prior consent to such processing after disclosing information regarding the purpose(s) for which we intend to process it.
Additionally, personal data of customers retained by us may be shared among us, ORIX Group companies, franchise companies of our car rental business and used car dealing business.
Utilization Purpose of ORIX Group companies are as follows.
Utilization Purpose of Franchise companies are as follows.
In the case of personal information of job applicants, the following purposes apply instead of those noted above.
ORIX has established internal rules and regulations on the protection of personal information and pays the utmost attention to managing personal information appropriately and protecting against leakage of such personal information. We have also implemented appropriate and reasonable levels of safety measures to protect against unauthorized access, loss, destruction, or alteration of personal data from outside the company.
Your personal information may be shared with the following third parties under certain circumstances.
Our website may from time to time contain links to and from websites of our business partners. Please be aware that each of these websites has its own privacy policy and ORIX has no control over how each business partner uses personal information [that it receives from you]. Prior to providing personal information to any of our business partners, please confirm the privacy policy of the relevant third party’s website.
Your personal information may be transferred to and processed in a country or region other than the one where you are located by ORIX or a third party described in Section 9 “Provision of Personal Information to Third Parties” of this Policy for the purposes set forth in Section 7 “Purpose for Processing of Personal Information” of this Policy. Such countries and regions include countries that have different standards of data protection than those of the country where you are located. ORIX will take all reasonable steps required by applicable law, including the execution of appropriate contracts, to ensure that your personal information is handled in a safe and secure manner and in accordance with this Policy and applicable data-protection laws and regulations.
You can exercise the following rights to the extent permitted by laws and regulations of the country or region in which you reside.
If you wish to exercise the right described above, please contact us through the e-mail address listed in Section 15 “Contact Information for Inquiries about Personal Information” of this Policy. In order to respond to your request and protect your privacy and security, we may request you provide information necessary for us to confirm your identity. In cases where we are unable to confirm your identity based on the information that we receive from you and information in our possession, we may request you provide additional information. We are committed to responding to your request to exercise your rights in accordance with applicable laws and regulations.
If you believe that ORIX is not in compliance with applicable laws and regulations on the protection of personal information, you have the right to file a complaint with the competent supervisory authority with oversight over data protection in accordance with applicable laws and regulations.
ORIX will generally only retain personal information we collect for a period of time reasonably necessary to achieve the particular business purposes for which we collected the personal information. In some cases, we may need to retain personal information for longer periods of time pursuant to laws or regulations applicable to our business. Personal information that is no longer needed will be promptly deleted.
In the event the Act on the Protection of Personal Information of Japan is applicable to the processing of your personal information, the following terms apply:
ORIX will not disclose or provide your personal information to third parties without your consent, except for cases of shared use, disclosure to contractors, or where otherwise permitted by applicable law and regulations.
ORIX Auto corporation is responsible for the management of shared personal data.
ORIX Auto corporation
ORIX INUI Bldg., 3-22-8 Siba,
Minato-ku, Tokyo, 105-8589, Japan
ORIX Auto Corporation
Email address: data_security_oac@orix.jp
Representative in EU
ORIX Corporation Europe N.V. Attn. Secretariat/Privacy matters
Address: Weena 850, 3014 DA Rotterdam, The Netherlands
Email Address: privacy @orixnv.com
This policy may be updated. The date on which this policy was most recently updated is noted below.
Pursuant to the California Consumer Privacy Act of 2018, and California Privacy Rights Act (collectively, the “CCPA”), we are providing the following additional details regarding the categories of Personal Information that we collect, use, and disclose about California residents.
Collection and Disclosure and sharing of Personal Information
The following chart includes the categories of Personal Information we collect and process, as well as which categories of Personal Information we disclose to third parties for our operational business purposes, including within the 12 months preceding the date this Privacy Policy was last updated.
| Categories of Personal Data | Categories of Third Parties to Whom Personal Data Has Been Disclosed for Operational Business Purposes | Categories of Third Parties to Whom Personal Data Has Been Sold | Categories of Third Parties to Whom Personal Data Has Been “Shared” for Purposes of Cross-Context Behavioral Advertising |
|---|---|---|---|
| Identifiers such as a real name, telephone number, postal address, email address, date of birth, company name, department name, position, business phone number, business address, unique personal identifier, passport number, signature, password of the account | Our affiliates, service providers, Governmental Agencies (if required) | None | None |
| Characteristics of protected classifications under California or U.S. federal law such as gender | Our affiliates, service providers, Governmental Agencies (if required) | None | None |
| Internet or other electronic network activity information such as cookies. | Our affiliates, service providers, Governmental Agencies (if required) | None | None |
| Audio, electronic, visual, thermal, olfactory, or similar information such as footage from security camera | Our affiliates, service providers, Governmental Agencies (if required) | None | None |
| Personal information as defined in the California customer records law, such as name, contact information (e.g., postal address, email address, phone number), date of birth, passport number, driver’s license, nation | Our affiliates, service providers, Governmental Agencies (if required) | None | None |
| Sensitive Personal Information, such as Personal Information that reveals an individual’s Social Security, driver’s license, or passport number, or citizenship. | Our affiliates, service providers, Governmental Agencies (if required) | None | None |
We do not “sell” or “share” and have not “sold” or “shared” Personal Information (including Sensitive Personal Information), as defined under the CCPA. We have not engaged in such activities in the 12 months preceding the date this Privacy Policy was last updated. Without limiting the forgoing, we do not knowingly “sell” or “share” Personal Information (including Sensitive Personal Information) of individuals under the age of 16.
We use, disclose and share this Personal Information for the purposes described in detail in Section 7 “Purpose for Processing of Personal Information” above.
We collect, process, and disclose Sensitive Personal Information for purposes permitted under applicable law, including for purposes of: performing services for our business, providing goods or services as requested by you; ensuring security and integrity; short term transient use such as displaying first party, non-personalized advertising; order processing and fulfillment; servicing accounts and providing customer service; verifying customer information; processing payments; providing financing; and activities relating to quality and safety control or product improvement; securing the access to, and use of, our facilities, equipment, systems, networks, applications, and infrastructure; preventing, detecting, and investigating security incidents; resisting and responding to fraud or illegal activities; and other collection and processing that is not for the purpose of inferring characteristics about an individual. We do not use or disclose Sensitive Personal Information for additional purposes.
We retain Personal Information (including Sensitive Personal Information) for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law and consistent with the criteria listed in Section 12. “Retention Period for Personal Information” above. In addition, we retain Personal Information (including Sensitive Personal Information) in light of whether retention is advisable in light of our legal position, such as in regard to applicable statutes of limitations, litigation, or regulatory investigations.
We collect this Personal Information from you and from the sources described in Section 5. “Methods of Acquiring of Personal Information” above.
If you are a California resident, you may make the following requests:
The categories of Personal Information we collected about you and the categories of sources from which we collected such Personal Information;
The specific pieces of Personal Information we collected about you;
The business or commercial purpose for collecting or sharing (if applicable) Personal Information about you;
The categories of Personal Information about you that we disclosed, and the categories of third parties to whom we disclosed such Personal Information (if applicable);and
The categories of Personal Information about you that we shared, and the categories of third parties with whom we shared such Personal Information (if applicable)
To submit a request to exercise your rights to know, correct, or delete regarding your Personal Information, please populate the webform accessible here or call us at 844-950-2318(Toll Free). Please specify in your request the personal information about you that you would like to have disclosed, collected or deleted, which can be all of your personal information as required by the CCPA.
We will ask that you provide certain information to verify your identity. The information that we ask you to provide to verify your identity will depend on your prior interactions with us and the sensitivity of the Personal Information at issue. We will verify and respond to your request in accordance with the CCPA, taking into account the type and sensitivity of the Personal Information subject to the request. If you make a deletion request, we may ask you to verify your request before we delete your Personal Information.
If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted in the section entitled “Individual Rights and Requests.” As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an authorized agent. In addition, we may require that you verify your identity as described in the section entitled “Individual Rights and Requests” or confirm that you provided the agent permission to submit the request.
You have the right to be free from unlawful discriminatory treatment for exercising your rights under the CCPA.
Where we maintain or use de-identified data, we will continue to maintain and use the de-identified data only in a de-identified fashion and will not attempt to re-identify the data.
Last modified: April, 22, 2024
