HOSPITALITY

MORI HOSPITALITY CORPORATION obtains and utilizes personal information such as our customer's name, address, telephone number, e-mail address and individual identification code to facilitate the execution of our businesses. We recognize that proper protection of the personal information of our customers to be a serious obligation, and, to fulfill this obligation, we handle personal information pursuant to the policy below.

1. MORI HOSPITALITY CORPORATION will comply with Act on the Protection of Personal Information, other related laws and regulations, and relating guidelines on the protection of personal information, and adhere to and abide by the generally accepted practices on the handling of personal information, and handle personal information properly. We will also strive to improve on the handling of personal information.
2. MORI HOSPITALITY CORPORATION will make the rules and regulations on handling of personal information clear, and disseminate and fully inform our employees of them. We will also request our business counterparts to handle personal information properly.
3. With respect to acquisition of personal information, the purpose of usage will be specified and notified or disclosed, and any personal information will be handled within the scope of said purpose.
4. When personal information of our customers is provided to relevant consignees as a result of consignment of all or part of the handled personal information to third parties, within necessary limits, to achieve the purpose of usage, upon confirmation that the personal information at the relevant consignee is protected adequately, an agreement on protection of personal information shall be concluded, and appropriate steps taken. When personal information of our customers is provided to relevant consignees in a foreign country, such consignees in a foreign country shall be required by contract, etc., to conduct personal information management which conforms to standards prescribed by rules of the Personal Information Protection Commission, and an appropriate supervision shall be conducted.
5. Necessary steps shall be taken in order to perform proper management to prevent leakage, loss, and falsification of personal information.
6. With respect to the personal data stored at MORI HOSPITALITY CORPORATION, when our customers personally make requests for disclosure, correction, deletion, or suspension of usage, we will respond in good faith.

MORI HOSPITALITY CORPORATION will acquire personal information necessary for conducting business, and will use personal information only within the scope of the following purposes

For guests using Roppongi Hills Club, ARK HILLS CLUB and HILLS SPA

1. To provide food and beverages, banquet, wedding, spa and fitness and other services, and to confirm customer information and members information in receiving dining reservation and party reservation;
2. To confirm use history of members and customers;
3. Confirmation and identification of members and customers when they arrive;
4. To send e-mail newsletters, seasonal publications, direct mails and invoices, etc., relating to businesses of MORI HOSPITALITY CORPORATION, MORI BUILDING Co., Ltd., and its affiliated companies;
5. Marketing research for the businesses of MORI HOSPITALITY CORPORATION and MORI BUILDING Co., Ltd.;
6. To invite members and customers for events and functions that MORI HOSPITALITY CORPORATION, and MORI BUILDING Co., Ltd, its affiliated company or a member hosts, co-sponsors, sponsors, supports, or collaborates on (hereinafter, “Event, etc.”), to inform members and customers of the Event, etc., and to send season's greetings to our members and customers; and
7. To perform other operations relating to the businesses of MORI HOSPITALITY CORPORATION and MORI BUILDING Co., Ltd.

For guests using Grand Hyatt Tokyo and Andaz Tokyo Toranomon Hills

1. To provide and charge for the accommodations, food and beverages, banquet, wedding, spa and fitness and other services, to confirm customer information and members information in receiving dining reservation and party reservation, to confirm use history of members and customers, and confirmation and identification of members and customers when they arrive;
2. Marketing activities in order to provide you with information regarding the services and goods, etc., and to provide you with the latest information;
3. To conduct a survey about the services and goods;
4. Used as statistical analysis for the purpose of marketing in a form which precludes personal identification; and
5. Used in the course of carrying out business.

For guests visit our website

1. Cookies: to provide proper information and to ensure security.
2. Access log: for statistical analysis for website maintenance and usage.

With respect to the handling of personal information provided by our customers, as set forth below, MORI HOSPITALITY CORPORATION will work on maintaining the accuracy of personal information through proper and stringent controls via the appointment of a security administrator of personal information. Furthermore, with respect to the risks of improper access from outside and prevention of any leakage of information, based on the rules and regulations on personal information protection and the detailed rules on handling and management of personal information, we will implement safety measures at the necessary and appropriate levels, and work on safety management of the personal information of our customers.

MORI HOSPITALITY CORPORATION will promptly dispose of our customers’ personal information if the retention period prescribed by laws and regulations has passed, or when the handling of our customers’ personal information is no longer necessary.

1. Enactment of basic policy
   This Privacy Policy is enacted as an organizational effort to secure the proper handling of personal data and to give notification to our customers of the inquiry desk for questions and complaint processing.
2. Preparation of rules regarding the handling of personal data
   We will prepare rules for personal data protection with respect to the handling method, responsible persons, and their duties, etc. regarding each stage of acquisition, usage, storage, provision, deletion, and disposition, etc. of personal data as rules regarding the specific handling of personal data for the purpose of the prevention of leakage, etc. of personal data that is handled and other safety management of personal data.
3. Organizational security management measures
   As well as appointing a security administrator of personal information, we will clarify the employees handling personal data and the scope of the personal data that such employees will handle, and establish the reporting and communication system to the responsible person in the event a fact of a breach of a law or rules and regulations on personal information or an indication thereof becomes known. We will also prepare a means to confirm the status of the handling of personal data.
4. Personal security management measures
   We will fully inform employees of the appropriate handling of personal data, and will also conduct appropriate education for employees.
5. Physical security management measures
   We will appropriately manage the areas where important information systems such as servers or main computers that handle personal information databases, etc. are managed and areas where administrative work that handles other personal data is conducted. In addition, we will conduct appropriate management in order to prevent the theft or loss, etc. of equipment, electronic media, and documents, etc. that handle personal data, and we will also take safety measures so that personal data is not easily revealed if electronic media or documents, etc. on which personal data is recorded will be transported.
6. Technical security management measures
   We will execute appropriate access controls in order to limit the scope of persons in charge and the personal information databases, etc. that are handled, and we will introduce and appropriately operate structures to protect the information system handling personal data from outside unauthorized access or unauthorized software.
7. Understanding the external environment
   If we handle personal data in a country other than Japan, we will take necessary and appropriate measures for the purpose of security management of personal data upon understanding the system, etc. for the protection of personal information in such country.

[Request Procedure]

Contact for requests prescribed in 7, 8, and 9 above relating to personal data stored at MORI HOSPITALITY CORPORATION, and inquiries and claims relating to our handling of personal information are shown below.
Procedure for the disclosure, correction, addition, deletion, suspension of the usage, removal or suspension of third party provision of retained personal information described above may be made through the inquiry form by post to ensure a strict identity verification procedure. Please enclose the identity verification documents such as a copy of a document with your photo, name, birthdate, address. Please be reminded that any request for disclosure or other handling in any other manner may not be accepted.

Personal Information Protection Secretariat
The cost of the procedure described in 7 above shall be 2,000 Japanese Yen for one inquiry and equivalent amount of the postal money order with fixed amount issued by Japan Post Bank (Teigaku-Kogawase) shall be enclosed when you make an inquiry. When you purchase the postal money order, the fee prescribed by Japan Post Bank will apply. The fee will be borne by you.