1. Collection, Purpose, Items, and Collection Methods on Personal Information

1. A. In sign up for membership, the company collects following personal information to provide accommodation and food & beverage service.

1. B. In sign up for membership, the company selectively collects following personal information.

1. C. For online members, the company may collect IP information, cookies information service records, payment information (credit card number, account number, voucher number, mobile payment approval number) only for the purpose of providing online membership service and checking financial transactions.
2. D. The company shall collect personal information through letter, FAX, phone call, event application, and event-generated information.

2. Provision and Sharing of Collected Personal Information to the Third Party

1. A. The company shall not use the personal information beyond the scope indicated in “Purpose on Collection and Use of Personal Information” or provide the personal information to others in any case except for the case with consent from customer or regulation or related legislation.
2. B. In succession and transfer of service supplier’s rights and liabilities due to sellout or merger, the company shall notify the consumer in detail about the proper reasons and procedures in advance. The company also shall provide the customers with the option to withdraw the consent on the collection and use of the personal information.
3. C. In providing or sharing the personal information upon the consent of customer, the company shall notify each consumer about the information on the supplier, personal information items to be provided and shared, the reason for such provision and sharing, and the period of protection and management in writing or e-mail and shall get consent from the customer. In change of supplier, the company shall notify and get consent from the customer based on the same procedure.
4. D. The company may provide the personal information without consent in accordance with the regulation of the related legislation.

1. B. In sign up for membership, the company selectively collects following personal information.

1. C. For online members, the company may collect IP information, cookies information service records, payment information (credit card number, account number, voucher number, mobile payment approval number) only for the purpose of providing online membership service and checking financial transactions. .
2. D. The company shall collect personal information through letter, FAX, phone call, event application, and event-generated information.
   1. Fulfillment of Contract related to Service Offer
   2. In accordance with the regulation of the related legislation upon request of the investigation authority for the investigation based on the legislated procedure and method.
   3. In provision of personal data after processing into the form for statistics, academic research, or market survey. In the form, certain individual shall not be identified.

3.Provision of Personal Information to the Third Party

4. Personal Information Collection via Cookies

1. A. Operation of Cookies
   1. The company shall operate the cookies for the user's convenience. The company shall collect membership ID and access IP through cookies. The information collected by cookies shall be used for maintaining the log-in status and for providing customized advertisement service.
2. B. Installation/Operation of Cookies and Right to Reject
   1. The customer shall have the right of choice for cookies installation. The customer may set the option in web browser to allow all cookies, check every saving of cookies, or reject saving of cookies. In rejection on saving the cookies, the customer may have partial limits on services that require log-in.

5. Retention Period and Disposal of Personal Information

1. A. The company shall hold the personal information until accomplishing the purpose of collected personal information. Upon completing the purpose or termination of consented period, the company shall dispose of the personal information immediately. The detailed disposal time shall be as follows.
   1. Membership Information : Shall be disposed when the member withdraws or gets expelled from membership
   2. Delivery Information : Shall be disposed when the article or service has been delivered or provided
   3. Information Collected for Survey and Event : Shall be disposed in completion of survey and event.
   4. Identification Information: Shall be disposed when the subject has been identified
   5. Regardless of the accomplishment of above purposes for personal information collection, the personal information may be kept for the following period when the personal information needs to be held for certain period due to related legislation or internal regulations.
   6. Record about Contract or Subscription Withdrawal : 5 Years
   7. Record About Supply of Payment and Goods : 5 Years
   8. Record About Consumer Complaint or Conflict Settlement : 3 Years
2. B. Disposal Method
   1. Personal Information Printed on Paper: Shall be disposed with paper shredder or consigned to paper disposal company
   2. Personal Information Saved as Electronic File: Shall be deleted using the technical method that completely removes the data

6. Rights and Obligation of User and Exercise Method

1. A. The customers may access their registered personal information at any time and may request revision, disposal, suspension of processing, and withdrawal of consent at any time. To access personal information, revise or delete personal information, suspend processing, or withdraw the consent, the customer shall click on 『Member Information』 and directly access and revise. The customer may also contact the main number (032.770-9500) or person in charge of personal information protection in writing, call, or e-mail and the appropriate measures shall be taken immediately after identification procedure.
2. B. When the customer requests revision on the personal information error, the personal information shall not be used or provided until completing the revision. In case of providing wrong personal information to the third party, the company shall notify the third party of the revision and shall revise the provided personal information.

7. Measures for Safe Personal Information

1. A. In handling personal information of customers, the company shall take following technical, administrative, and physical measures to prevent loss, robbery, leak, falsification, or damage of personal information and to secure security.
   1. Minimum Number of People in Charge of Personal Information and Education
      The company shall minimize the number of people in charge of personal information and shall carry out regular educations.
   2. Regular Self-Inspection
      For safe personal information, the company shall conduct regular self-inspection.
   3. Establishment and Implement of Internal Management Plan
      For safe processing of personal information, the company shall plan and implement internal management plans.
   4. Encryption of Personal Information
      The personal information of user shall be saved and managed after encryption and only the user may know the password. The company shall also encrypt file and transfer data and shall protect important data through separate security features. To prevent leak and damage of personal information due to hacking or computer virus, the company shall install security program and shall conduct regular update and inspection. The company also shall install security system in the access control area and shall observe and block hacking and damage technically and physically.
   5. Access Control for Personal Information
      The company takes measures necessary for controlling access to personal information by assigning, changing, and cancelling access to data base system which processes personal information. The company also controls unauthorized external access by using firewall system.
   6. Storage of Access Record and Forgery Prevention - The company stores and manages the record of access to personal information processing system for at least 6 months. The company also uses security feature to prevent forgery, robber, and loss of access record.
   7. Locking Device for Document Security
      The company stores personal information document and auxiliary storing medium in a safe place with locking device. The company has a separate physical storage place for storage of personal information with access control on unauthorized person.

8. Feedback and Complaints

1. A. The company shall care about the opinions of customer and the customers shall have the right to receive sincere answer on their inquiry. The company provides customer center for smooth communication with customers 【Customer Center】
   1. Telephone Number :032.770-9500
2. B. Telephone counselling is available from 9:00 AM to 6:00 PM. Inquiry via e-mail, FAX, and mail will be answered within 24 hours upon receipt. For inquires made after business hours or on weekends and holidays, the inquiry will be processed on the next day in principle.
3. C. To report or counsel on other infringement of personal information, please contact the following institutes.
4. Personal Information Infringement Report Center(privacy.kisa.or.kr /Call 118 without area code)
5. High-Tech Crimes Department, Supreme Prosecutor’s Office (www.spo.go.kr /Call 1301 without area code)
6. National Police Agency, Cyber Bureau (cyberbureau.police.go.kr /Call 182 without area code)

9. Person in Charge of Personal Information Protection

10. Personal Information Protection for Children Under 14

11. Sending of Advertising Information

1. B. Counselling is available from 9:00 AM to 6:00 PM via telephone. Inquiry via e-mail, FAX, and mail will be answered within 24 hours upon receipt. For inquires made after business hours or on weekends and holidays, the inquiry will be processed on the next day in principle.
2. B. When the company sends the advertisement information or product information via e-mail for online marketing, the company shall take the following measures on the title and body part for easy recognition of customers.
3. E-Mail Title : The company may not indicate the word (Advertisement) on the title. The e-mail title shall indicate the main contents of the e-mail.
4. E-Mail Body: The company shall indicate the name, e-mail address, telephone number, and address of sender that user may refer to when unsubscribing the letter. The company shall indicate the easy method for unsubscribing the advertisement information letter.
5. C. When the company sends advertising information for marketing via methods other than e-mail such as FAX and SMS message to customers who consented on receiving the advertisement, the company shall take appropriate measures and indicate the name of the sender.

12. Link Sites

1. A. The company may provide the customer of link to data or website of other companies. In this case, Harbor Park Hotel does not hold any right to control external sites and data. Thus, Harbor Park Hotel does not hold any liability or guarantee on usefulness of service or data provided by other sites.
2. B. When the customer clicks the link provided by the Harbor Park Hotel and gets transferred to the page of other sites, the privacy statement is not related to Harbor Park Hotel. Thus, the customer may need to review the policy of the sites.

13. Posts

1. A. The company values the posts of customers and tries its best to prevent the posts from falsification, damage, and deletion. However, the company may not value the posts on the following cases.
2. Spam Posts (Example : Chain letter, advertisement of certain sites)
3. Posts that spread false information with the purpose of slander and defamation
4. Posts that reveal personal information of other people without consent. Posts that violate the copyright of the third person. Posts that are not related to bulletin board
5. For posts disclosing of personal information without consent, the company may delete certain part or revise the part with marks to activate desirable bulletin board culture.
6. For posts of content related with the subject of other bulletin board, the company moves the posts and clarifies the transfer path on the posts to prevent any misunderstanding.
7. For other cases, the company may delete the posts after explicit or individual warning.
8. B. A writer shall hold the overall rights and liability related to the posts. The information released voluntarily through posts cannot be protected. Be sure to consider about the content before disclosing the information.

14. Change of Privacy Statements

1. When the contents of internal policy or security technology are added, deleted, or revised in accordance with legislation and revision of law, the company shall post notice on the changed items immediately through homepage.
2. Privacy Statements Version Number : v3
3. Privacy Statements Enforcement Date : July 01, 2009
4. Privacy Statements Change Date : June 18, 2012
5. Privacy Statements Change Date: June 20, 2018