Personal Information Treatment Policy
(details the policy for 2019.05.01 ~ 2020.04.28)
Grand Korea Leisure Co., Ltd. establishes and discloses the Personal Information Handling Guideline as below in order to protect personal information of information holders and handle relevant grievances quickly and smoothly in accordance with Article 30 of the Personal Information Protection Act.
Article 1. (Purpose of Handling of Personal Information)① Grand Korea Leisure Co., Ltd. handles personal information for the purposes below. Personal information handled are not used for any other purposes. When the purposes are changed, necessary actions such as acquisition of consent will be taken in accordance with Article 18 of the Personal Information Protection Act.
- 1. Personal information is handled for the purpose of checking one’s intent to join as a member, identifying and authenticating members for membership services, maintaining and managing members, verifying one’s identity according to the limited personal identity verification system, preventing illegal use of services, checking consent of a legal representative when handling personal information of a child below 14 years of age, making announcements and notifications, and handling grievances.
- 2. Personal information is used in order to handle civil complaints, such as identification of a person who has filed a complaint, details of the complaint, contact information for investigation, and notification of settlement results.
② The files on personal information the Company registers and discloses pursuant to Article 32 of the Personal Information Protection Act are as follows.
| NO | Personal information file | Basis of operation/Handling purpose | Personal informaton items recorded in the personal information file | Possession period |
|---|---|---|---|---|
| 1 | 7luck Website Membership Information | Consent by the subject of information, membership management | *Required: Name, e-mail, address *Optional: Nationality, gender, date of birth, membership card number, mobile phone number (required for use of credits) |
3 years (deleted right after withdrawal from membership) |
| 2 | Casino customer information | Article 29 (Casino Users' Duties) of Tourism Promotion Act | *Required: Name, birth date, passport number, alien registration number, mobile number, address, occupation, nationality *Optional: Agreement to receive SMS |
5 years from the final transaction date (however, upon request of information owner to delete, information is deleted immediately and handled in a way that it cannot be used by other means, unless such information is required to be stored by relevant laws) |
※For more information on personal information files registered by the Company, please visit the portal site on personal data protection, operated by the Ministry of the Interior and Safety (www.privacy.go.kr), and use the menu Civil Complaint on Personal Information > Request to View Personal Information > Search the List of Personal Information Files.
Article 2. (Personal Information Handling and Retention)- ① The Company handles and retains personal information for the period of use and retention of personal information in accordance with the relevant legislation or for the period of use and retention of personal information to which the subject of personal information has agreed at the time of information collection.
- ② The said periods of personal information use and retention are as follows.
- 1. Member registration and management on the 7luck marketing website : 3 years (deleted right after withdrawal from membership)
- 2. Casino customer management : 5 years from the final transaction date (however, upon request of information owner to delete, information is deleted immediately and handled in a way that it cannot be used by other means, unless such information is required to be stored by relevant laws)
① Grand Korea Leisure Co., Ltd. only handles personal information of information holders within the scope stipulated in Article 1 (Purpose of Handling Personal Information). Personal information is only provided to a third party when Article 17 of the Personal Information Protection Act applies, as agreed by the information holder or specially regulated by laws.
② Grand Korea Leisure Co., Ltd. provides personal information to a third party as below.
Article 4. (Entrustment of Personal Information Handling)① Grand Korea Leisure Co., Ltd. consigns handling of personal information as below to ensure smooth handling of personal information.
| NO | Contractor | Period of Entrustment | Address | Tel. | Entrusted Works |
|---|---|---|---|---|---|
| 1 | ATECINS Co., Ltd. netKTI Co., Ltd. |
‘18/10/16 ~ ‘20/10/15 |
6F, Building 2, Pangyo Seven Venture Valley, Pangyo-ro 228beon-gil, Bundang-gu, Seongnam-so, Gyeonggi-do | 031-696-8762 | Operation and management of information system (including agency and marketing websites) |
| 2 | Lotte Tour Development Co., Ltd. | ‘19/1/1 ~ ‘21/5/31 |
149, Sejong-daero, Jongno-gu, Seoul (Sejong-ro) | 02-2075-3847 | Checking information when a customer books an airline ticket |
② The Company sets out not only the objective of entrusted works in an entrustment agreement or other such documents, according to Article 25 of the Personal Information Protection Act, but also prescribes responsibilities, such as prohibition of personal information processing, technical/administrative measures for protection, restrictions on re-entrustment, management and supervision of contractors, and compensation for damage. In addition, the Company supervises the contractors so as to ensure safe processing of personal information.
③ Change in entrusted works or contractors will be forthwith disclosed according to this Personal Information Policy.
Article 5. (Rights and Obligations of Subject of Personal Information)- ① Information holders can exercise their rights to view, correct, delete and suspend handling of personal information with Grand Korea Leisure Co., Ltd. at any time.
- ② Your rights related to Grand Korea Leisure Co., Ltd. described in paragraph 1 can be exercised via a written document, e-mail or fax in accordance with Article 41, paragraph 1 of the Enforcement Decree of the Personal Information Protection Act. Grand Korea Leisure Co., Ltd. will promptly respond to your request.
- ③ The exercise of a right under Paragraph 1 may be performed by the subject of the personal information, his/her legal representative or any other agent. Exercising such a right by a legal representative or any other agent requires a designated power of attorney as the Form 11 attached to the Enforcement Decree of the Personal Information Protection Act.
- ④ A request to view or suspend handling personal information may limit the right of the subject of the information in accordance with Article 35 (5) and Article 37 (2) of the Personal Information Protection Act.
- ⑤ A request to correct or delete personal information shall not be fulfilled in the case where the personal information concerned is stipulated by the relevant legislation as an object of information collection.
- ⑥ The Company will verify the identity of the person who as the subject of personal information, has made a request to view, correct, delete or suspend handling personal information.
① Grand Korea Leisure Co., Ltd. is generally responsible for handling of personal information and appoints a personal information protection manager as below to handle any grievances and relieve damages of information holders in relation to personal information.
▶ Privacy protection manager
- Name : Hyeong-Ho Lee
- Department : Director of Innovative Management Headquarters
- Position: Executive
- Contact : <02-6421-6005>, <privacy@7luck.com>
▶A department that handles personal information protection duties and related grievances
- Department : Information Protection Team
- Position : Jinhyeong Park
- Contact : <02-6421-6072>, <jinhyeong.park@7luck.com>
- ※ his leads to the department in charge of protecting personal information.
② Information holders may contact the person and department in charge of protecting personal information in relation to all personal information inquiries, complaints and damages that arise while using the services of Grand Korea Leisure Co., Ltd. Grand Korea Leisure Co., Ltd. will respond to any inquiries of information holders without delay.
Article 7. (Installation, Operation and Refusal of Personal Information Auto-Collecting Device)The Company does not use cookies that save and retrieve information on content use in order to provide users with customized services.
Article 8. (Items of Personal Information Handled)The items of personal information handled by the Company are as follows.
| NO | Personal information file | Items of Personal Information Recorded in Personal Information File |
|---|---|---|
| 1 | 7luck Website Membership Information |
|
| 2 | Casino customer information |
|
① Grand Korea Leisure Co., Ltd. destroys personal information immediately when it becomes unnecessary due to expiration of the possession period and accomplishment of the purpose.
② If personal information needs to be preserved in accordance with other laws despite expiration of the possession period agreed by the information holder or accomplishment of the purpose, such personal information (or personal information file) is preserved by transferring it to a separate database or relocating to a separate storage place.
③ The procedure and method of destroying personal information are as follows.
- A. Procedure for Destruction
- Grand Korea Leisure Co., Ltd. establishes a plan to destroy personal information (or personal information file) and destroys it accordingly. Grand Korea Leisure Co., Ltd. selects personal information (or personal information file) that needs to be destroyed and destroys personal information (or personal information file) by receiving approval of the personal information protection manager.
- B. Destruction Method
- Grand Korea Leisure Co., Ltd. destroys personal information recorded or stored in electronic files in a way that the record cannot be restored. Personal information recorded on paper documents are destroyed by shredding or incinerating.
① Grand Korea Leisure Co., Ltd. takes the following measures to secure safety of personal information.
- 1. Administrative measures: Establishment and enforcement of an internal management plan,, periodic education of employees, etc.
- 2. Technical measures: Management of access to the personal information handling system, etc., encryption of unique identification information, etc., installation of security programs
- 3. Physical measures: Control of access to computer room, data storage room, etc.
The subject of personal information may inquire to the following agencies about a remedy for infringement or for consultation regarding personal information.
<The agency below is an agency irrelevant to Grand Korea Leisure Co., Ltd. If you are discontent about handling of personal information or damage relief by Grand Korea Leisure Co., Ltd., contact the agency below for help.>
▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
- Jurisdiction: Report or consultation on infringement on a right to personal information
- Website: privacy.kisa.or.kr
- Tel.: (without a telephone exchange number) 118
- Address: Personal Information Infringement Reporting Center, 3F, 9, Jinheung-gil, Naju-si, Jeollanam-do (301-2, Bitgaram-dong) (58324)
▶ Privacy dispute arbitration committee (operated by Korea Internet & Security Agency)
- Jurisdiction: Application for personal information dispute mediation, settlement of collective dispute (civil remedy)
- Website: www.kopico.go.kr
- Tel.: (without a telephone exchange number) 1833-6972
- Address: 4F, Government Complex-Seoul, 209, Sejong-daero, Jongno-gu, Seoul (03171)
▶Cyber Crime Investigation Division of Supreme Prosecutors' Office: (without a telephone exchange number) 1301, cid@spo.go.kr (www.spo.go.kr)
▶ Cyber Safety Bureau of Korean National Police Agency: (without a telephone exchange number) 182 (cyberbureau.police.go.kr)
Article 12. (Request to View Personal Information)-
① A request to view personal information under Article 35 of the Personal Information Protection Act may be made by the subject of the information to the following department. The subject of information may make a request to the Ministry of the Interior and Safety. The Company will make efforts to have such a request to be promptly processed.
▶ Department Responsible for Receiving and Handling Requests to View Personal Information
Department: Information Protection Team
Officer: Jinhyeong Park
Contact: <02-6421-6072>, <jinhyeong.park@7luck.com> -
② The subject of information may make a request to view personal information on the Personal Information Protection portal site of the Ministry of the Interior and Safety (www.privacy.go.kr) as well as to the department referred to in Paragraph 1.
▶ Visit the Personal Information Protection portal site of the Ministry of the Interior and Safety. Use the menu Civil Complaint on Personal Information > Request to View Personal Information, etc. (I-PIN is required for personal verification.)
- ① This Personal Information Policy shall be effective on and after May 1, 2019.
