Go to Body.

Privacy Policy (ORIX Auto Corporation)

We are committed to building strong trust with customers by providing high-quality services that cater to their diverse needs, which is enabled by the comprehensive strength of ORIX Group.
To that end, we regard Personal Information of customers as a significantly important information asset. We collect such information by lawful and fair means, and appropriately utilize, manage and protect such in accordance with the following.
This document, in accordance with provisions of laws relating to the protection of Personal Information, discloses utilization purposes and describes the handling of Personal Information performed by us.

Utilization Purpose of Personal Information

We will utilize all Personal Information of customers retained by us for the following purposes. We will not utilize Personal Information of customers beyond the scope that is necessary to achieve these utilization purposes, without obtaining the consent of the information owner.

  1. Appropriately handle business correspondence, such as applications from customers or proposals from us to customers in relation to our business, such as automobile leases, financing, rental and installment sale and purchase, sale of automobile and other insurance, automobile sale, purchase and maintenance and car sharing service (refer to our website https://www.orix.co.jp/auto for detailed descriptions of our business).
  2. Perform credit check in cases of transactions such as automobile leases, financing and installment sale and purchase (Credit Granting Transaction), as well as make appropriate decisions relating to and undertake identity verification of customers.
  3. Appropriately manage customer contracts. This includes appropriate management of expired/terminated contracts for reference and as required by laws.
  4. Send promotional mails and e-mails regarding company profiles, products and services, of us, ORIX Group companies and other companies.
  5. Conduct marketing analysis to improve customer satisfaction by seeking to provide better products and services for customers.
  6. Perform management activities necessary for our operation.
  7. Share with ORIX Group companies and franchise companies our car rental business and used car dealing business.
  8. Provide to a third party to the necessary extent for the performance of appropriate operations, such as providing Personal Information to participating consumer credit information agencies for credit business (Only with consent for such provision to third parties).

For the avoidance of doubt, when we intend to use Personal Information for purposes outside those listed above, we will clarify such purposes and obtain the consent relating to the information owner in advance.

Shared Use of Personal Data

Owing to the nature of ORIX Group addressing diverse customer demands with comprehensive strength as a group achieved by operating under consolidated management, personal data of customers retained by us may be shared among us, ORIX Group companies, franchise companies of our car rental business and used car dealing business as follows.

Shared User ORIX Group companies (ORIX Corporation, as well as legal affiliate companies adopting consolidated accounting and accounted for by the equity-method of ORIX Corporation). For clarity, such affiliate companies may or may not include "ORIX" in their company names. For details regarding affiliate companies not including "ORIX" in their names, please refer to "Shared Users List".
* Affiliate companies are subject to change.
Franchise companies (companies that have a Franchise Contract with us for the car rental business or used car dealing business. Listed in "Car Rental Franchise Companies List" "ORIX U-car Shops".)
* These companies are subject to change.
Utilization Purpose of Shared User (1) Perform administration that is necessary for management of us or ORIX Group companies, such as identifying claims, asset conditions and risks.
(2) Conduct marketing analysis and development of products and services to improve customer satisfaction by providing better products and services for customers.
(3) Introduce and offer products and services produced by ORIX Group companies (for details, please refer to "Our Business" (https://www.orix.co.jp/grp/en/business/)).
(1) Appropriately handle business conversations with customers, such as applications from customers or proposals from franchise companies to customers within shops of franchise companies.
(2) Conduct marketing analysis and development of products and services to improve customer satisfaction by providing better products and services for customers.
Personal Data for Shared Use Items Items to the extent necessary to achieve the above "Utilization Purpose of Shared User," such as name, address, date of birth, telephone number, consumer credit-related information (assets, debts and other account-related matters, collateral contents and previous payment history of customers, and other matters necessary to determine paying capacity of customers), and transaction information (type, amount, balance and payment status of the transaction) Items to the extent necessary to achieve the above "Utilization Purpose of Shared User," such as name, address, date of birth, telephone number, matters stated on license, etc. such as license number, and transaction information (type, amount, balance and payment status of the transaction, etc.)
Manager of Personal Data 3-22-8 Shiba, Minato-ku, Tokyo 105-8589
ORIX Auto Corporation

Compliance

To protect Personal Information and ensure the safety thereof, we recognize the need of disseminating such to all our officers and employees, and ensuring that they comply with laws and other rules relating to the handling of Personal Information. We endeavor to ensure such dissemination and compliance.

Continuous Improvement of Compliance Program

We have developed a compliance program, including matters relating to the handling of Personal Information, and regularly review and continuously improve such program.

Protection and Management of Personal Data

We have established company rules and regulations and appropriately manage and devote maximum attention to prevent outward leakage of personal data of customers by designated persons in charge of compliance from each division. Additionally, we implement security measures at appropriate and reasonable levels against risks such as unauthorized access form external sources and loss, destruction and manipulation of the data.

Outsourcing of Handling of Personal Data

For the provision of better services, we may outsource some of our operations, and in such cases, all or part of the handling of personal data may also be outsourced. Upon selection of an outsourcee, we establish selection criteria for careful evaluation to ensure appropriate handling is in place within such outsourcee such as matters relating to the management of personal data, confidentiality, limitation of subcontracting and leakage prevention of personal data of customers. An outsourcee shall be selected and managed based on such criteria.

Provision of Personal Data to Third Party

Personal Data of customers retained by us will not be disclosed or provided to any third party without the consent of customers. However, personal data may be disclosed or provided without consent of customers in the following cases.

  1. When required by law.
  2. When required for the protection of an individual's life, or physical/financial welfare (including financial welfare of an entity) and obtaining the consent of customers is difficult or impossible.
  3. When specifically required for the advancement of public health or the healthy upbringing of children and obtaining the consent of customers is difficult or impossible.
  4. When required to cooperate with national or municipal entities or contractors consigned by said entities to carry out work or activities stipulated by law and when obtaining the consent of customers will hinder the operations of said entities.

With respect to transactions with customers, for the purpose of verifying repaying or paying capacity of customers, etc., we may provide personal data of customers to our participating consumer credit information agency and members thereof with consent of the information owner. For details, please refer to documents provided when giving consent.

Notice of Utilization Purpose, Disclosure, Correction and Utilization Cease of Retained Personal Data

  1. Notice of Utilization Purpose of Retained Personal Data
    Customers are entitled to ask us to notify customers of the utilization purposes of personal data retained by us regarding requesting customers ("Retained Personal Data" hereinafter). When customers request notification of the utilization purpose of Retained Personal Data regarding themselves, we will handle such request in accordance with laws and without delay.
  2. Disclosure of Retained Personal Data
    Customers are entitled to ask us to disclose their Retained Personal Data to said customers. When customers request disclosure of Retained Personal Data regarding themselves, we will handle such request in accordance with laws and without delay.
  3. Correction of Retained Personal Data, etc,
    As a result of such disclosure described in the preceding item and when an error is found in such Retained Personal Data, customers are entitled to request correction, addition or deletion ("Corrections" hereinafter) of such Retained Personal Data. When customers request Corrections of Retained Personal Data regarding themselves, we will handle such request in accordance with laws and without delay.
  4. Cease of Utilization of Retained Personal Data, etc.
    In the case of a request made by customers to cease utilization of or to delete Retained Personal Data regarding themselves for the following reasons (1) or (2), or to cease third-party provision for the following reason (3) (collectively "Cease of Utilization" hereinafter), when we deem such request has a justifiable reason, we will handle such request in accordance with laws without delay.
    1. (1)We are using Retained Personal Data of the requesting customers for purposes outside those provided herein.
    2. (2)Retained Personal Data of the requesting customers was not collected by appropriate and fair measures.
    3. (3)The provision of Retained Personal Data of the requesting customers violates the preceding "Provision of Personal Data to Third Party".

Requests for notice of utilization purpose, disclosure, Corrections and Cease of Utilization of Retained Personal Data will be processed by firstly completing "identity verification" prescribed by us, and asking customers to complete application procedures prescribed by us. Additionally, fees may apply. For details regarding procedures and fees, please contact the following "Personal Information Support Desk."

Personal Information Support Desk

ORIX Auto Corporation
Legal and Compliance Office
Operating Hours: Monday–Friday 9:00–17:00 (excluding Holidays and New Year period)
TEL: 03-6436-6015

Updates

The Privacy Policy may be updated. Please check the last modified date below.

Last modified: May 30, 2017
ORIX Auto Corporation

Privacy Policy (Applicable to Processing of Personal Data of Data Subjects in EEA)

This Privacy Policy applies to the processing of Personal Data concerning data subjects in the European Economic Area ( "EEA" ) by ORIX Auto Corporation (the "Company" ) in accordance with the General Data Protection Regulation ( "GDPR" ).

To run our business, we process information about you (referred to as "Personal Data" ), as prospective and current customers, representatives of our prospects, customers and suppliers, and visitors to our websites.

The protection of your Personal Data is important to us. We therefore process any Personal Data entrusted to us, as data controller or data processor, in full compliance with applicable law, in particular, GDPR.

  1. Types of Personal Data We May Process

    In this Privacy Policy, "Personal Data" means any data relating to an identified or identifiable natural person. We may process Personal Data such as your name, gender, telephone number, email and/or postal address and fixed and/or mobile phone number, date of birth, passport information, driving license information, credit card details including the name of the credit card holder, the billing address, the credit card number and the expiration date and any other Personal Data you choose to provide to us.

  2. Collection, Use and Disclosure of Personal Data

    (1) Purposes of use of Personal Data
    We process your Personal Data to achieve the purposes set forth below.

    1. (A)Appropriately handle business correspondence, such as applications from customers or proposals from us to customers in relation to our business, such as automobile leases, rental and installment sale and purchase transactions, sales of automobile and other insurance, automobile sales, purchase and maintenance and car sharing services (please refer to our website https://www.orix.co.jp/auto for detailed descriptions of our business).
    2. (B)Perform credit checks in connection with transactions such as automobile leases, installment sale and purchase transactions (Credit Granting Transaction), as well as make appropriate decisions relating to, and undertake, identity verification of customers.
    3. (C)C)Appropriately manage customer contracts. This includes archiving of expired/terminated contracts for reference and as required by applicable law.
    4. (D)Send promotional mails and e-mails regarding profiles, products and services, of the Company and other companies in the ORIX Group (ORIX Corporation and all companies that based in law have consolidated accounts with ORIX Corporation or are accounted for by the equity-method).
    5. (E)Conduct marketing analysis to improve customer satisfaction by seeking to provide better products and services for customers.
    6. (F)Perform management activities necessary for our operation.
    7. (G)In order for us and other companies of the ORIX Group to perform various required management tasks, including understanding the state of claims and assets and risks.
    8. (H)Perform marketing analysis and product and services development in order to provide our customers with better products and services, and greater satisfaction as a result.
    9. (I)Introduce and propose the products and services offered by the companies of the ORIX Group (for full details of the work that we do, please see "Our Business" (https://www.orix.co.jp/grp/en/business/)).

    We may also obtain personal data from our third party service providers and from public sources and combine that with information we collect from you where we believe that it is necessary to help manage our relationship with you.

    (2) Legal Grounds for Processing your Personal Data
    We may process your Personal Data based on the following legal grounds:

    1. To perform your instructions or fulfil the obligations under contracts with you;
    2. Based upon your consent expressly given to us, to process the Personal Data in such manner. You may withdraw the consent to this processing at any time; however, this will not affect the lawfulness of any processing activity carried out by us before such withdrawal of your consent.
    3. To comply with legal and regulatory obligations; and
    4. To further our legitimate interests or those of any third-party recipients of the Personal Data, provided that such interests are not overridden by your interests or fundamental rights and freedoms.
    In relation to the processing of your Personal Data, our legitimate interests include:
    1. To benefit from cost-effective services (e.g. using cloud platforms operated by third party suppliers);
    2. To offer our products and services to our customers (e.g. by communicating through a newsletter or other marketing materials, in which case we will also comply with applicable rules governing direct marketing);
    3. To prevent fraud or criminal activity, misuse of our products or services as well as the security of our IT systems, architecture and networks; and
    4. To meet our corporate and social responsibility objectives.

    (3) Additional Processing
    In the case of processing your Personal Data for purposes other than the foregoing, we will notify you in advance of such purposes and other matters as required by applicable law.

    (4) Necessity of providing Personal Data
    The Personal Data that you are to provide is necessary for us to provide our services to you. Therefore, without the Personal Data, there may be cases where we will not be able to provide the services to you, in whole or in part.

    (5) Retention Period
    We will only retain your Personal Data for as long as such Data is necessary to fulfil the purposes for which it was collected to provide the services to you and for any period thereafter as legally required or permitted by applicable law. We will promptly delete your Personal Data when such Data is no longer needed.

    (6) Transfer of Personal Data
    (A) Within ORIX Group
    We may transfer Personal Data to personnel within our Company and to other ORIX Group companies. Such other ORIX Group companies will either act as another independent controller or will process your Personal Data on our behalf and upon our request (thereby acting as "data processor" ). In all cases, the Personal Data will be processed only for the purposes set out above.
    For clarity, such affiliate companies within the ORIX Group may or may not include "ORIX" in their company names. For details regarding affiliate companies not including "ORIX" in their names, please refer to "List of Shared Users" and "List of Franchisee Companies"
    (https://www.orix.co.jp/grp/en/privacy_policy_list.html)
    (https://car.orix.co.jp/eng/franchise/index.html)
    * Affiliate companies are subject to change.

    (B) Outside ORIX Group
    We may also transfer Personal Data to third parties outside our Company and the ORIX Group, including our (IT) systems, cloud service and database providers, franchise companies of our car rental business and used car dealerships, outside contractors and professionals (including accounting firms, tax firms and law firms), to achieve the purposes set out above, to the extent they need it to carry out the instructions we have given to them.
    As data processors or joint data controllers, the above third parties enter into an agreement with us to process the Personal Data in compliance with applicable law (including GDPR).
    Where required, we may also transfer your personal data to:

    1. Any third party to whom we assign or novate any of our rights or obligations under a relevant agreement; and
    2. Any national or international governmental or judicial authority, where we are required to do so by applicable law or regulation or at their request, in compliance with applicable law.


    (C) Outside the EEA.
    The Personal Data may be transferred to entities in countries or jurisdictions outside the EEA, such as Japan, if required for the purposes described above. Please note that such countries or jurisdictions may not have the same data protection laws as the EEA and that they may not afford many of the rights conferred upon you in the EEA. We will ensure that any such international transfers are made subject to appropriate and suitable safeguards as required by GDPR or other relevant laws. When doing so, we will comply with applicable data protection requirements and take appropriate safeguards to ensure the security and integrity of the Personal Data. This may include entry into the relevant EU standard contractual clauses as approved by the EU Commission prior to such transfer to ensure the required level of protection for the transferred Personal Data. You may request additional information in this respect.

  3. Your Rights as a Data Subject

    Within the limits and under the conditions set forth in the law (including GDPR), you have the following rights:

    1. To access your Personal Data as processed by us and obtain a copy thereof;
    2. To request any correction or update thereof;
    3. To request the erasure of your Personal Data;
    4. To request the restriction of the processing of your Personal Data;
    5. To withdraw your consent where we based our processing of your Personal Data on your consent (without such withdrawal affecting the lawfulness of processing prior thereto);
    6. To object to the processing of your Personal Data;
    7. To request the portability of your Personal Data (i.e. to obtain the Personal Data you have provided to us in a structured, commonly used and machine-readable format and/or to request the transmission of such Personal Data to a third party, without hindrance from us and subject to your own confidentiality obligations).

    When we receive a request based on the rights specified above, we will conduct any necessary investigation without undue delay and provide you or a nominated third party with the Personal Data or respond to such rights without undue delay.

    Please note that you may raise an objection to the competent data protection authorities having jurisdiction over us or in the location of your usual residence or place of work with regard to the processing of your Personal Data or of an alleged infringement of GDPR.

  4. A minor' s consent

    Your guardian' s consent or permission must be obtained in the event that you are under the age of 16 and use our service and consent to this Privacy Policy.

  5. Inquiries

    If you have any questions or concerns regarding this Privacy Policy or our processing of Personal Data, or any requests concerning the exercise of your rights as a Data Subject described in Section 3 above, please contact us at the following:

    ORIX Auto Corporation
    [Department] ORIX Auto Corporation Legal and compliance office
    [Address] 3-22-8 Shiba, Minato-ku Tokyo 105-8589 Japan
    [Phone number] +81 3 6436 6015

    Representative
    The contact information for our representative is as follows:
    [Representative' s Name] ORIX Corporation Europe N.V. Attn. Secretariat/Privacy matters
    [Address] Weena 850, 3014 DA Rotterdam, The Netherlands
    [Email Address] privacy @orixnv.com

  6. Revision of this Privacy Policy

    We may modify this Privacy Policy when necessary. We will announce the revised Privacy Policy on our website when a revision is made. Please make sure to regularly check the contents of this Privacy Policy.
    After the Policy is revised, you shall be deemed to have agreed to the revised Policy when you use our services or view this Privacy Policy.

    This Privacy Policy is written in the English language and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this Privacy Policy, the English version shall prevail.

  7. Effective date: 【12th. November 2018】
    ORIX Auto Corporation
    /CEO:Yuji Kamiyauchi

PAGETOP
PAGECLOSE