MORI HOSPITALITY CORPORATION obtains and utilizes information such as our customer's name, address, telephone number, e-mail address and individual identification code to facilitate the execution of our businesses. We recognize that proper protection of the Personal Information of our customers (hereinafter, "Personal Information") to be a serious obligation, and, to fulfill this obligation, we handle Personal Information pursuant to the policy below.
We will comply with the specific items below.
MORI HOSPITALITY CORPORATION will acquire Personal Information necessary for conducting business, and will use Personal Information only within the scope of the purposes stated below:
a) For guests using Roppongi Hills Club, ARK Hills Club and Hills Spa:
b) For guests using Grand Hyatt Tokyo and Andaz Tokyo:
c) For guests visit our website:
With respect to the handling of Personal Information provided by our customers, MORI HOSPITALITY CORPORATION will work on maintaining the accuracy of Personal Information through proper and stringent controls via the appointment of a security administrator of Personal Information.
Furthermore, with respect to the risks of improper access from outside and prevention of any leakage of information, based on the rules and regulations on Personal Information protection and the detailed rules on handling and management of Personal Information, we will implement safety measures at the necessary and appropriate levels, and work on safety management of the Personal Information of our customers.
We clarify the rule for handling Personal Information to our employees and educate them so that they fully understand the importance of Personal Information and the rule and system to protect Personal Information.
We supervise our outsourcing agents and subcontractors so that they execute proper administration to protect Personal Information and take other proper measures by executing an agreement with them regarding the protection of Personal Information.
In case of providing personal data to a third party in a foreign country, we will make an agreement which requires the third party to implement Personal Information management conforming to standards prescribed by rules of the Personal Information Protection Commission, and will conduct appropriate supervision over the third party.
Without the consent of the individual, MORI HOSPITALITY CORPORATION will not provide Personal Information to any third party, except for cases permitted under the related laws or regulations, or except in the cases prescribed in the following article.
There may be cases where Hyatt Hotels Corporation (including Grand Hyatt Tokyo, Andaz Tokyo) and MORI HOSPITALITY CORPORATION jointly use Personal Information (personal data), such as names, addresses, phone numbers and all other items that are provided by our guests, for marketing activities and provision of information regarding Hyatt Hotels Corporation. In such cases, MORI HOSPITALITY CORPORATION is responsible for management of personal data.
With respect to Personal Information stored at MORI HOSPITALITY CORPORATION, when our customer personally requests disclosure of his/her information, except in the case as required by ordinances, we provide disclosure within a reasonable timeframe, to a reasonable extent, upon verification that the requestor is the actual customer.
With respect to Personal Information stored at MORI HOSPITALITY CORPORATION, when our customer personally requests corrections, additions, or deletions of his/her information, when our details differ from fact, we make corrections, additions, or deletions within a reasonable timeframe, to a reasonable extent, upon verification that the requestor is the actual customer.
With respect to Personal Information stored at MORI HOSPITALITY CORPORATION, when our customer personally requests suspension of the usage or removal of his/her information, or the providing of his/her information to third parties, we will suspend providing information to third parties, or remove or suspend the usage of his/her information without delay, upon verification that the requestor is the actual customer and it is verified that the request of our customer is legitimate, within a reasonable timeframe, to a reasonable extent.
Contact for requests prescribed in 8, 9, and 10 above relating to Personal Information stored at MORI HOSPITALITY CORPORATION, and inquiries and claims relating to our handling of Personal Information are shown below.
The request procedure shall follow the procedure that we have prescribed separately. Procedure for the disclosure, correction, addition, revision, cessation of use or deletion of retained Personal Information described above may be made through the inquiry form by post to ensure a strict identity verification procedure. Please enclose the identity verification documents such as a copy of a document with your photo, name, birthdate, address.
Please be reminded that any request for disclosure or other handling in any other manner may not be accepted.
6-10-3 Roppongi Minato-ku, Tokyo 106-0032, Japan
MORI HOSPITALITY CORPORATION
To the person in charge of Act on the Protection of Personal Information
The cost of the procedure described above shall be 2,000 Japanese Yen for one inquiry and equivalent amount of the postal money order with fixed amount issued by Japan Post Bank (Teigaku-Kogawase) shall be enclosed when you make an inquiry.
When you purchase the postal money order, the fee prescribed by Japan Post Bank will apply. The fee will be borne by you.
Effective Date: April 1, 2005
Amendment Date: January 1, 2010
Amendment Date: April 1, 2013
Amendment Date: April 1, 2017
Amendment Date: June 1, 2018
Amendment Date: April 1, 2019
Added Appendix A: “Additional Provisions Applicable to Processing of Personal Information of EEA Residents.” Appendix A includes detailed information provided pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of Personal Information and on the free movement of such data, commonly referred to as the “General Data Protection Regulation” (GDPR).
For individuals residing in the EEA, this Appendix outlines certain additional information that MORI HOSPITALITY CORPORATION is obligated to provide to you, as well as certain rights you have with respect to the processing of your personal information, based on the General Data Protection Regulation (GDPR). This Appendix A shall prevail to the extent it conflicts with any provision in the main body of this Policy.
The purposes of personal information:
The purposes of personal information that we handle are set out in Article 2.
The categories of personal information:
Personal Information that we collect and retain includes the following:
Acquisition of Personal Information：
We collect personal information from the following sources in conducting business related to our facilities, services and products.
Provision to a third party：
We provide Personal Information to a person who falls under any of the following items:
We process customer’s personal information based on the customer’s consent in principle. The processing of personal information in the absence of the customer’s consent shall be based on the necessity for the performance of the contract with the customer, the necessity to take steps at the request of the customer prior to entering into a contract, the necessity for the purposes of the legitimate interests pursued by us or a third party, or the necessity for compliance with a legal obligation to which we are subject. The legitimate interests pursued by us or a third party include an increase in operating income from marketing and improvement of services, and improvement of the convenience, security, etc., of our website.
For the purposes of fulfilling the contract with the customer, or for taking procedures according to the customer’s request prior to entering into a contract, personal information acquired outside Japan will be transferred to Japan.
Japan has received an adequacy decision on protection of personal information from the European Commission.
We handle the customer’s personal information with appropriate security and confidentiality measures.
We retain personal information for the period necessary to accomplish its purpose of processing. Following the retention period, we eliminate or anonymize such personal information in a secure way within a reasonable period of time.
You have the following rights with respect to us based on laws and regulations.
A customer may exercise these rights by contacting the Inquiry Desk stated in Article 11 of the Policy.
In the event that you exercise these rights, we will respond in good faith, barring statutory exceptions, after confirming that the requesting person is the person in question.
You can withdraw consent on the processing of your personal information at any time. Withdrawing consent does not affect the lawfulness of the processing based on consent before the withdrawal. You can withdraw consent by contacting the Inquiry Desk stated in Article 11 of the Policy.
Customers have the right to lodge a complaint on the processing of their personal information with the protection authority having jurisdiction over their residence.
We require the following information to provide accommodation services to our customers. In particular, the laws of Japan require that we keep the information on the hotel register for three years. Should you be unable to provide the required information, we may not be able to provide you with accommodation services.
A guardians consent or permission must be obtained in the event that a customer under the age of 16 uses our service and consents to the Policy.
We do not make decisions based solely on automated processing, including profiling.
Notwithstanding Article 11 of this Policy, no postal money order with fixed amount issued by Japan Post Bank (Teigaku-Kogawase) shall be enclosed when you make an inquiry.