In order to protect users' personal information and their rights and interests under the Personal Information Protection Act, <Hotel Kumo Mountain 처리>, the following treatment measures are provided to ensure that users' grievances regarding personal information are dealt with smoothly.
<Geumosan hotel.> the (is) the company was notice through the (or individual notice) websites if the notice through the stance of handling personal information.
○ From 2019 should enter into force on September 5. This bangchimeun
1. of personal data Geumoh less than >('https://www.hotelgeumosan.com' 'Geumosan hotel.') (is) personal information for the following purposes the hotel treatment purposes for processing. Personal information processed is not used for purposes other than the following, and if the purpose of use is changed, prior consent will be sought.
Go. Membership registration and management of the homepage
Personal information is processed for the purpose of checking the member's intention to sign up.
B. Use for marketing and advertising
Personal information is processed for the purpose of developing new (product) services and providing customized services.
2. Personal information file status
1. Personal information file name: personal information
- Personal information item: Email, mobile phone number, login ID, name
- Collection method: homepage
- Retention base: db
- Retention period: Destroy without delay
- Related statutes:
3. Processing and holding period of personal information
① <Geumosan hotel> processes and retains personal information within the period of personal information possession and utilization under the Act or within the period of personal information possession and use, which is agreed upon when collecting personal information from the information subject.
② Each person's personal information processing and retention period is as follows.
1.[Home page membership registration and management]
Personal information related to <Home Page Membership and Management> is collected.held for the purpose of use above from the date of agreement on the use to <disposal without delay>It's used.
- Retention base: db
- Related statutes:
4. Items related to third party provision of personal information
① <Geumosan hotel>('https://www.hotelgeumosan.com' under Hotel Geumo Mountain산 shall provide personal information to third parties only when it falls under Articles 17 and 18 of the Privacy Act, including the consent of the information subject and the special provisions of the law.
② <Geumosan hotel> provides personal information to third parties as follows:
1. <Geumosan hotel>
- Person who receives personal information: Hotel money miscalculation
- The purpose of the recipient's personal information use: e-mail, login ID, name
- Obtained by the recipient.Duration of use: destruction without delay
5. Personal information processing consignment
① <Geumosan hotel> consigns personal information processing activities as follows for smooth handling of personal information.
1. <Geumosan hotel>
- Contents of entrusted tasks:
- Consignment period:
② In the event of a consignment contract, <Geumosan hotel>('https://www.hotelgeumosan.com'> and under <Geumosan hotel>, the consignee's personal information is safely handled by the trustee and other matters concerning personal information handling, technical and administrative protection measures, limits on trustees, management of trustees, supervision, and damages are stipulated in the contract and supervised by the trust
6. Users of the rights, obligations, and methods of exercise of the information subject and legal representative may exercise the following rights as the personal information subject.
① The information subject can exercise his/her right to access, correct, delete, and stop processing personal information at any time for hotel payment miscalculation.
② The right under paragraph 1 can be exercised through written, e-mail, or FAX in accordance with Article 41 paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and hotel money miscalculation will be taken without delay.
③ The exercise of rights under paragraph 1 can be conducted through a legal representative of the information subject or through an agent, such as a person who has received a commission. In this case, you must submit a letter of attorney according to the form No. 11 attached to the Enforcement Rules of the Personal Information Protection Act
④ Requests for personal information access and suspension of processing may limit the rights of the information subjects pursuant to Article 35 para 5 and Article 37 para 2.
⑤ Personal information modification and deletion request cannot be requested to be deleted if the personal information is specified as the target of collection in other statutes.
⑥ Check if the person who made the request, such as the request for access according to the right of the information subject, the request for correction or deletion, or the request for suspension of processing, is a person who is a person who is a legitimate agent.
7. Itemization of personal information processed
① <Geumosan hotel>('https://www.hotelgeumosan.com'> handles the following personal information items:
1[Home page membership registration and management]
- Required item: Login ID, name
8. If the purpose of handling personal information has been achieved in principle, the personal information of Hotel Geumo Mountain shall be destroyed without delay. Procedure, time and method for decommissioning is as follows.
The information entered by the user is transferred to a separate DB (a separate document for paper) after completion of the purpose and stored for a certain period of time or immediately destroyed according to the internal policy and other related statutes. In this case, personal information transferred to the DB is not used for any other purpose than by law.
If the personal information of the user has expired, the personal information of the user shall be destroyed within five days from the end date of the retention period, and within five days from the date when the personal information is deemed unnecessary, such as the achievement of the purpose of processing the personal information, the abolition of the service or the termination of the business.
- Demolition method
Information in the form of electronic files uses a technical method that does not allow recording to be replayed.
9. Items on the installation, operation, and refusal of the automatic personal information collection device
Hotel Geumo Mountain does not use 'cookies' to save and retrieve information from the information subject.
10. Creating a Personal Information Protection Officer
① <Geumosan hotel> under Hotel Geumo Mountain('https://www.hotelgeumosan.com' is in charge of handling personal information and is designated as the person in charge of personal information protection as follows to handle complaints and remedy damages by the information subjects related to personal information processing.
▶ Personal information protection officer
Name: Woo Hyung Joo
Position: Deputy Chief
Position: Deputy Chief
※ Link to the department in charge of personal information protection.
▶ Department in charge of personal information protection
Department name : Management department
Contact: Woo Hyung Joo
② The information subject can contact the personal information protection manager and the department in charge of personal information protection, complaint handling, damage relief, etc. all inquiries related to personal information protection caused by using the service (or business) of Hotel Geumosan('https://www.hotelgeumosan.com' or below. Hotel Geumo Mountain('https://www.hotelgeumosan.com' and 'Hotel Geumo Mountain' will respond and process inquiries from the information subject without delay.
12. In accordance with Article 29 of the Privacy Act, <Hotel Kumo Mountain>('Hotel Geumo Mountain'), the following technical/management and physical measures are taken to secure safety:
①. Restricting access to personal information
Through granting, altering, and terminating access authority to database systems that process personal information, the company is taking necessary measures to control access to personal information and controlling unauthorized access from outside using the intrusion prevention system.