1. Compliance with Applicable Laws and Regulations
CRE REIT complies with “Act on the Protection of Personal Information” (Act No. 57 of May 30, 2003, the Act on the Protection of Personal Information (the "Personal Information Protection Act")) and other applicable laws and administrative guidelines on the protection of personal information when handling personal information.
2. Purpose of Use of Personal Information
CRE REIT uses personal information to the extent necessary to achieve the following purposes of use:
|(1)||for CRE REIT's unitholders (the “Unitholders”) to exercise their rights against CRE REIT or for CRE REIT to perform its obligations to Unitholders;|
|(2)||to analyze attributes of the Unitholders, prepare various data and otherwise manage information;|
|(3)||to conduct business activities related to the acquisition, sale or lease of assets, management of real estate by CRE REIT, and other asset management activities under applicable laws and regulations;|
|(4)||to conduct business activities related to IR activities and general administrative tasks by CRE REIT; and|
|(5)||to ensure the proper and smooth performance of the activities listed in (1) to (4) above and any other activities ancillary or related thereto.|
3. Appropriate Collection of Personal Information
CRE REIT collects personal information only to the extent necessary to achieve the purpose of use by using appropriate means. In collecting personal information, except where the purposes of use have been published, CRE REIT clearly informs an individual who provides personal information (the “Relevant Individual”) about such purposes, collects the items of information the Relevant Individual has consented to provide, and uses information within the scope of the consent from the Relevant Individual. However, the process of informing the Relevant Individual of the purposes of use may be skipped if the purposes of use are clear from the circumstances in which personal information is collected.
4. Provision of Personal Information to Third Parties
CRE REIT does not provide personal information or data it collects to any third party without prior consent from the Relevant Individual, except in the following cases:
|(1)||It is required to provide or disclose personal information by law.|
|(2)||It is necessary to provide or disclose personal information for the purpose of protecting life, body or property and it is difficult to obtain consent of the Relevant Individual.|
|(3)||It is particularly necessary to provide or disclose personal information for the purpose of improvement of public health or promotion of sound development of children and it is difficult to obtain consent of the Relevant Individual.|
|(4)||It is necessary to cooperate with a national governmental agency or a local government or its delegate in performing the affairs stipulated by law, and it is likely to impede the performance of such affairs to obtain consent of the Relevant Individual.|
|(5)||It is otherwise permitted in the Personal Information Protection Act or applicable guidelines to provide or disclose personal information to third parties without consent of the Relevant Individual.|
5. Secure Management of Personal Information
CRE REIT keeps personal data accurate and updated, and endeavors to further improve and strengthen the control system by taking appropriate security control measures from organizational, personnel, physical and system perspectives when handling personal data.
6. Supervision of Service Providers Handling Personal Information
CRE REIT may outsource handling of collected personal information to a service provider to the extent necessary for the purposes of use. In such case, CRE REIT supervises the service provider as necessary and appropriate to ensure the secure management of the personal information.
7. Procedures for Disclosure, Correction, Suspension of Use, etc. of Personal Information
|(1)||When making a request regarding personal data retained by CRE REIT pursuant to Article 27.2 (Notification of a Utilization Purpose), Article 28.1 (Disclosure), Article 29.1 (Correction) and Article 30.1 (Utilization Cease or Deletion) of the Personal Information Protection Act, send or deliver the request in person together with an identification document (an original or copy of your driver’s license, certificate of residence or similar certificate) (representatives should also provide his/her own identification document).|
|(2)||Any reply or response from CRE REIT will, in principle, be sent by mail to the Relevant Individual to protect privacy (Note that a reply or response to a request made by a representative will also be directed to the Relevant Individual).|
|(3)||For requests, inquiries and complaints regarding CRE REIT's handling of personal information, please contact the following:|
|Contact||Corporate Planning Dept., CRE REIT Advisers, Inc.|
|Office Hours||9:30 a.m. to 5:30 p.m. (excluding Saturdays, Sundays, public holidays)|
The name and complaint/consultation desk of the Accredited Personal Information Protection Organization to which CRE REIT Advisers, Inc. belongs are as follows:
|Contact||Investors Enquiry Section, The Investment Trusts Association, Japan|
|Office Hours||9:30 a.m. to 11:30 a.m. and 12:30 p.m. to 17:00 p.m. (excluding Saturdays, Sundays, public holidays)|
February 7, 2018
CRE Logistics REIT, Inc.