１．Creation of Privacy Policy

One REIT, Inc. (hereafter referred to as “One REIT”) has formulated a privacy policy to ensure appropriate handling of personal data.

２．Organizational Safety Management Measures

An external third party may be commissioned to conduct a review of One REIT’s management approach with regard to the handling of personal data.

３．Individual Safety Management Measures

One REIT signs a non-disclosure agreement with its officers with regard to the handling of personal data.

４．Physical Safety Management Measures

In areas where personal data is handled, we control entry and exit by officers, as well as implement measures to prevent personal data being viewed by individuals without authorization.
We implement measures to prevent the theft, loss, etc. of devices, electronic media, documents, etc. used to handle personal data or information leaks in cases where electronic media, etc. are carried.
We implement measures relating to the deletion of personal data and disposal of devices, electronic media, etc.

５．Technical Safety Management Measures

We implement access control and limit the scope of databases, etc. containing personal information that we handle.
For information systems used to handle personal data, we implement measures (e.g., security measures, diagnosis of network vulnerabilities by specialized external organizations) to prevent unauthorized access by external parties and protect against malware.

６．Understanding of External Environment (Handling of Personal Data in Other Countries)

If personal data that we acquire will be handled in other countries, we will understand systems, etc. relating to protection of personal information in those countries and implement necessary and appropriate measures to ensure personal data safety management.
At present, One REIT has no plans to handle personal data in other countries.

７．Supervision of Suppliers

Through periodic monitoring of the personal data management conditions at suppliers entrusted with such data, One REIT verifies suppliers’ compliance with safety management measures, etc. stipulated in the contract with them, and if they are not in compliance with the details of the contract relating to the outsourced work, supervision will be undertaken to ensure they do comply with those details.