Article 1 (Personal information items to be processed)

• ① The hotel handles the following personal information items.

  Table of personal information collected

  division	Classification	Personal information item
  Required	Room Access	Name, sex, cell phone, email, date of birth, billing information
  	fitness	Name, nationality, sex, date of birth, mobile phone number, date of enrollment
  	Events & Promotions	Name, Mobile Phone Number, Personal SNS Account Information Address
  Optional	Room Access	Company Name
  	fitness	Company name, position, address (home / company), telephone number (home / company), car number, email address

Article 2 (Purpose of Personal Information Processing)

• ① The hotel handles personal information for the following purposes:

  Purpose of Personal Information Processing Table

  division	Classification	Personal information item	Purpose of use
  Required	Room Access	Name, sex, cell phone, email, date of birth, billing information	Confirm your identity and contract with hotel products and delivery
  	fitness	Name, nationality, gender, photo, date of birth, mobile phone number, date of enrollment	Self-identification and fitness services, payment of deposit (deposit) and return
  	Events & Promotions	Name, Mobile Phone Number, Personal SNS Account Information Address	Identify and forward notices, deliver goods
  Optional	Room Access	Company Name	Inquiry for contract fee application
  	fitness	Company name, title, home / business address, phone number, car number, email address	Identify and provide parking information

  ② The personal information that is processed is not used for purposes other than the purpose, and when the purpose of use is changed, it will carry out necessary measures such as receiving the consent in accordance with the related law.

Article 3 (Processing and Retention Period of Personal Information)

• ① The hotel will process and retain personal information for the purpose only during the period of holding or using the personal information according to the law or during the period of using or using the personal information agreed upon when collecting personal information from the information subject.

  ② The processing and retention period of the personal information agreed upon when collecting from the information subject are as follows.

  Personal information processing and retention period table

  division	Classification	Personal information item	Retention and use period
  Required	Room Access	Name, sex, cell phone, email, date of birth, billing information	From the day of collection, use agreement to one year
  	fitness	Name, nationality, gender, photo, date of birth, mobile phone number, date of enrollment	From the day of collection, use agreement to one year
  	Events & Promotions	Name, Mobile Phone Number, Personal SNS Account Information Address	From the time of collection until the end of the event and one month after delivery
  Optional	Room Access	Company Name	From the day of collection, use agreement to one year
  	fitness	Company name, title, home / business address, phone number, car number, email address	From the day of collection, use agreement to one year

  ③ The processing and retention period of personal information in accordance with laws and regulations is as follows.

  Table of personal information processing and retention period according to statute

  Items to hold	Retention period	Legal basis
  Records related to withdrawal of contract or subscription	5 years	Act on Consumer Protection in Electronic Commerce
  Records of payments and supplies	5 years	Act on Consumer Protection in Electronic Commerce
  Records of consumer complaints or disputes	3 years	Act on Consumer Protection in Electronic Commerce
  Records on collection, processing and use of credit information	3 years	Act on the Use and Protection of Credit Information
  Display / Ad Recording	6 months	Act on Consumer Protection in Electronic Commerce
  Logging of user's internet logs etc. / Tracking user's access point	3 months	Communications Confidentiality Act
  Communication facts	12 months

Article 4 (Providing Personal Information to a Third Party)

• ① The hotel does not provide the user's personal information to the outside without the consent of the user. However, the following cases shall be excluded.

  • 1. If there is a special provision in the law or it is inevitable to comply with statutory obligations
  • 2. If the information subject or its legal representative is unable to express his / her intention or is unable to obtain prior consent due to unknown address, If it is deemed necessary for the benefit of the imminent life, body and property of a third party
  • 3. If there is a request by the investigating agency in accordance with the provisions of laws and regulations or in accordance with the procedures and methods prescribed in the Act for the purpose of investigation

  ② If the provider of the third party is required to provide the personal information of the user other than the changed or agreed contents, We will provide.

Article 5 (Consignment of personal information processing)

• ① The hotel consigns the personal information processing business to the outside professional company for smooth service execution and business processing as follows.

  Consignment table of personal information processing

  Name of the trustee	Contents of commissioned work
  GJ Global Inc.	Hotel management, CCTV operation, security control

  ② The Hotel shall clearly stipulate matters such as the prohibition of personal information processing other than the purpose of conducting the duties, the technical, administrative, physical safety protection measures, confidentiality and damages compensation, so that the personal information can be protected safely when the personal information processing business is entrusted , We monitor whether the trustee handles personal information securely.

  ③ If the contents of consignment service or the fiduciary is changed, we will disclose it through website notice (or individual notice) and this personal information processing policy without delay.

Article 6 (Rights, duties and methods of information subject)

• ① The information subject can exercise the right of privacy protection at any time with respect to the company.

  • 1. Personal information request
  • 2. If there is an error,
  • 3. Delete request
  • 4. Process stop request

  ② The exercise of the rights under Paragraph 1 may be made in writing, by phone, e-mail, etc., and the Hotel will take action without delay.

  ③ When the information subject asks for correction or deletion of personal information, the hotel will not use or provide the personal information until the correction or deletion is completed.

  ④ The exercise of the rights under Paragraph (1) may be done through the legal representative of the information entity or the agent who has been delegated. In this case, you must submit a power of attorney according to Form 11 of the Enforcement Regulations of the Personal Information Protection Act.

  ⑤ The information subject should not infringe the personal information and privacy of the information subject or other person that the company is handling in violation of related laws such as the Personal Information Protection Act.

Article 7 (Destruction of personal information)

• ① When the personal information is unnecessary such as the elapse of the personal information retention period and the purpose of processing, the hotel will immediately destroy the personal information without any reason. The procedures and methods of abolishing the company are as follows.

  • 1. Destruction procedure
    If the period of retention of the personal information agreed by the information subject has elapsed or the purpose of processing has been accomplished, it will be deleted or destroyed after being stored for a certain period according to the internal policy and other related laws.
  • 2. Destruction method
    The hotel deletes the personal information stored in the form of an electronic file using a technical method that can not reproduce the record, and the personal information recorded or output in the paper document is crushed or destroyed by the crusher.

Article 8 (Measures to Ensure the Safety of Personal Information)

• ① The hotel takes the following administrative, technical and physical measures to ensure the safety of personal information in order to prevent loss, theft, leakage, alteration, or damage to personal information.

  • 1. Administrative Measures: Establishing internal regulations, observing and observing to protect personal information, and regular training
  • 2. Technical measures: management of access rights such as personal information processing system, installation of access control system, encryption of unique identification information, installation of security program, etc.
  • 3. Physical measures: access control of computer room, data storage room, installation of access authentication and monitoring system, etc.

Article 9 (Person in Charge of Personal Information Protection)

• ① The hotel is responsible for the processing of personal information, and has designated the person responsible for the protection of personal information as follows to handle complaints and remedy of information related to personal information processing.

  Privacy Director Table

  Privacy Officer	Privacy Manager	Personal information reading request reception desk, processing department
  belong : name : telephone : e-Mail :	belong : name : telephone : e-Mail :	belong : name : telephone : e-Mail :

  ② The information subject can inquire about personal information protection related complaint, complaint handling, damage relief, etc. that occurred while using the company's service (or business) to the person in charge of personal information protection and department in charge. The hotel will respond to inquiries from the information subject without delay.

Article 10 (Infringement Remedy Method)

• ① The information subject can inquire of the following organizations about the damage of personal information infringement, consultation.

  • 1. Personal Information Infringement Notification Center (operated by Korea Internet & Security Agency)
    • Subsidiary services: Reporting personal information infringement facts, requesting consultation
    • Homepage: privacy.kisa.or.kr
    • Phone: (without area code) 118
    • Address: (138-950) Seongpa-gu, Songpa-gu, Seoul 135 Korea Internet & Security Agency Personal Information Infringement Complaints Center
  • 2. Personal Information Dispute Resolution Committee (Korea Internet Development Agency)
    • Jurisdiction: Personal information dispute settlement application, collective dispute settlement (civil settlement)
    • Homepage: privacy.kisa.or.kr
    • Phone: (without area code) 118
    • Address: (138-950) Seongpa-gu, Songpa-gu, Seoul 135 Korea Internet & Security Agency Personal Information Infringement Complaints Center
  • 3. The Supreme Prosecutors' Office Cyber ​​Crime Division: 02-3480-3571, cybercid@spo.go.kr (www.spo.go.kr)
  • 4. National Police Agency Cyber ​​Terror Response Center: 1566-0112 (www.netan.go.kr)

  ② The above organization is separate from the company. If you are not satisfied with the company's own personal information complaints, damage relief results, or need more help, please contact us.

Article 11 (Installation and Operation of Image Information Processing Equipment)

• ① The hotel installs and operates the video information processing equipment as shown below.

  • 1. Purpose and purpose of installing image information processing device: Purpose of facility safety and prevention, prevention of crime for customer's safety, prevention of vehicle theft and breakage
  • 2. Installed number, installation location, shooting range: 132 units installed inside and outside, parking lot entrance and parking lot, the whole area of ​​major facilities is photographed.
  • 3. Administrative officer, department in charge and the right of access to image information : GJE Global Lee Jeon-gyu team leader
  • 4. Video information recording time, storage period, storage place, processing method
    • Shooting time: 24 hours shooting
    • Storage period: 30 days from shooting
    • Storage place and processing method: Storage and processing in support team video information processing equipment control room
  • 5. How to check the video information and location: Request the manager (support team)
  • 6. Measures to request information such as viewing information of the information subject: Requests for the request of reading or confirming the existence of personal image information. If the information subject himself is photographed or if it is necessary for the benefit of the life, body and property of the information subject clearly Allow reading for one year
  • 7. Technical, administrative, and physical measures to protect video information: establishment of internal management plan, restriction of access control and access rights, application of secure storage and transmission technology of video information, Locking device, etc.

Article 12 (Change of Personal Information Processing Policy)

• ① This privacy policy is effective July 1, 2016