GRAND WALKERHILL SEOUL

Privacy Statement of Walkerhill Hotel

Walkerhill Hotel(hereinafter "Walkerhill"), run by SK Networks Co., Ltd., dedicates to protecting privacy and safeguarding personal data of guests using our website http://www.walkerhill.com(hereinafter "Website"). Accordingly, Walkerhill complies with the personal information protection regulations and guidelines applied for the information and communication service provider under the Personal Information Protection Act.

Privacy Statement of website contains the following.

1. Scope of personal information collected

1. Walkerhill shall collect guests' personal information by lawful and fair means.
2. Personal information collected by Walkerhill shall be divided into required items and optional items and shall be limited to the minimum amount necessary to provide services. Sensitive personal information (e.g., race, religion, ideology, place of birth, permanent domicile, political inclination and criminal record, and health condition and sexuality) whose collection could violate a guest's fundamental human rights shall not be collected.

2. Purpose of processing personal information

Walkerhill shall process personal information for the following purposes. The personal information processed shall not be used for any purpose other than those mentioned below. When the purpose of use is changed, necessary measures(e.g., obtaining a separate consent or agreement under Article 18 of the Personal Information Protection Act) shall be taken.

1. Website membership subscription and management

   Confirm the intent of membership subscription, verify identity for membership service, manage membership eligibility, verify identity under the system of limited identity verification, prevent unauthorized use of service, send notices, notify results of request processing, etc.

2. Provide goods or services

   Ship or deliver products, make reservations, provide service, send contract/invoice sheet, provide content, provide tailored services, verify identity, verify age, payment, debt collection, etc.

3. Handle complaints

   Verify complaint submitter's identity, check the content of complaint, send notice for fact-finding purposes, notify results of complaint handling, etc.

3. Purpose of collecting and using personal information

1. Walkerhill shall use personal information collected through its website, membership subscriptions, or events, in order to provide better service.
   Walkerhill shall collect personal information for the following purposes.

   Purpose of collecting and using personal information Table

   	Items collected / Purpose of use / Method of collection / Period
   Membership (Walkerhill Prestige Club)	[Required] Full name, gender, mobile phone number, email address, date of birth Verification of identity for membership service Credit card information Payment for annual membership fee and product purchase(Used only for payment and not stored in the system) [Optional] Name of company, department, position, mailing address (Excluding homepage) Statistics on use of membership service Information on the use of membership service Date of consent for receiving marketing/promotional messages, consent items (SMS, e-DM, TM) Marketing activities for hotel services, promotions & events, through SMS, e-DM, and TM TM to attract membership re-subscription Mailing address Deliver membership card and brochure Referrer (employee ID, name) To verify subscription path [Method of collection] Website / Phone / Email / Electronic subscription / Partnering with card issuers [Period] 3 years from expiration date
   Membership (Walkerhill Rewards)	[Required] Full name, gender, mobile phone number, email address, date of birth Verification of identity for membership service Notify membership benefits, terms of service amendment,; handle inquiries/complaints [Optional] Mailing address Statistics on use of membership service Deliver membership card and brochure Date of consent for receiving marketing/promotional messages, consent items (SMS, e-DM, TM) Marketing activities for hotel services, promotions & events, through SMS, e-DM, and TM Referrer (employee ID, name) To verify subscription path [Method of collection] Phone / Email / Electronic subscription / Smartphone application [Period] 3 years from the day of last transaction
   Walkerhill Rewards Online Membership	[Required] Email address(ID), password, full name, mobile phone number, date of birth, gender Verification of identity for membership service Notify membership benefits, terms of service amendment,; handle inquiries/complaints [Optional] Date of consent for receiving marketing/promotional messages, consent items (SMS, e-DM, TM) Marketing activities for hotel services, promotions & events, through SMS, e-DM, and TM Referrer (employee ID, name) To verify subscription path [Method of collection] Website (Web/App) [Period] 3 years from the day of last transaction
   Log-in(Google) linked service	[Mandatory] Email or phone number Identify users by logging in service with SNS ID for Walkerhill Rewards Membership [Method of collection] Website (Web/App) [Period] Until cancel the linked service with SNS account
   Log-in(Naver) linked service	[Mandatory] Email Identify users by logging in service with SNS ID for Walkerhill Rewards Membership [Method of collection] Website (Web/App) [Period] Until cancel the linked service with SNS account
   Log-in(KAKAO) linked service	[Mandatory] Email Identify users by logging in service with SNS ID for Walkerhill Rewards Membership [Method of collection] Website (Web/App) [Period] Until cancel the linked service with SNS account
   Log-in(Apple) linked service	[Mandatory] Email Identify users by logging in service with SNS ID for Walkerhill Rewards Membership [Method of collection] Website (Web/App) [Period] Until cancel the linked service with SNS account
   ROO	[Required] Full name, date of birth, mobile phone number, email address Verification of identity for membership services Notify membership benefits, terms of service amendment,; handle inquiries/complaintss Mailing address Deliver membership card and brochure Resident Registration(Alien Registration Card Number) Tax Filings(Inheritance and Donation Law Decree Article 84) Acquisition Report Evidence Submitted(Local Tax Law Article 20 Clause 1 and the Enforcement Decree for Article 33, paragraph 1, "Local Tax Law, Article 152, paragraph 1", and "Rural Special Tax" Article 7) Bank account number Use for returning deposit upon withdrawal of ROO (Collection and utilization at the time of withdrawal) [Optional] Photo Offering customized service, preventing identity theft Phone number(Home, Business) Handling of inquiries / complaints Name of company, department, position Provide service fitting demographic characteristics Statistics on the use of membership service Primary Account Member Name To confirm primary account when adding additional family members ★Health information Use as reference in emergency situations during use of facilities ★Body composition (InBody) Used for health analysis / management, customer service Date of consent for receiving marketing/promotional messages, consent items (SMS, e-DM, TM) Marketing activities for hotel services, promotions & events, through SMS, e-DM, and TM TM to attract membership re-subscription [Method of collection] Written [Period] 3 years from expiration date
   Wellness Program	[Required] Full name, contact information, e-mail address Identification to provide Wellness programs/services Handling of complaints about reservations / inquiries / customer service / complaints related to the Wellness program [Method of collection] Web/App [Optional] Name, age, gender, additional contact information Utilize for providing Wellness programs Identification and customer service Method to inform the reservation [Method of collection] Phone/Email [Period] 1 year from termination of service
   Grand Fitness Membership	[Required] Full name, gender, date of birth, address, mobile phone number, email address Verification of identity for membership service Notify membership benefits, terms of service amendment,; handle inquiries/complaints Mailing address Delivery of membership card and brochures Credit card information (credit card number, expiration date) Payment of the annual membership fee (Used for payment only and not stored in the system) [Optional] Date of consent for receiving marketing/promotional messages, consent items (SMS, e-DM, TM) Marketing activities for hotel services, promotions & events, through SMS, e-DM, and TM [Method of collection] Tablet for e-registration [Period] 3 years from termination of service
   Personal training	[Required] Full name, mobile phone number Verification of identity [Optional] Body composition (InBody) Used for health analysis / management, customer service [Method of collection] Written [Period] 1 year
   Room registration card	[Required] Full name, mobile phone number, nationality, email address, room number, check-in check-out date Provide use of hotel and rooms Verification of identity for use of services Handle complaints, lost items, etc. Handle problems related to use of hotel [Optional] Mailing address, Name of company, date of birth, membership numbe Provide service fitting demographic characteristics Statistics on use of membership service [Method of collection] Written, App [Period] 3 years from the check-out dater
   Inquiries on wedding / meeting / family events	[Required] Full name, mobile phone number, email address Handing reservations and inquiries [Method of collection] Website [Period] 6 months
   Voice of Customer	[Required] Full name, email address, mobile phone number Verification of identity Handling inquiries and complaints [Method of collection] Website [Period] 3 months
   Online Reservation (Room)	[Required] Full name (English), Contact information, Email address Verification of identity for the use of services Notification of reservation information Provide use of hotel and rooms For mobile check-in service Handling customer complaints and claims. Prevention of illegal use and handling legal disputes. Credit card information (type of credit card, credit card number, expiration date) Guarantee the payment for the use of room and facility For mobile check-in/check-out service [Period] 3 months from Check-in date [Required] Date of birth, First 2 digits of credit card password Verification of the credit card [Period] Delete right after the initial payment [Optional] Gender Personal verification and identification Credit card information (type of credit card, credit card number, expiration date, First 2 digits of credit card password), Date of birth Payment method for the hotel service [Method of collection] Website [Period] 3 months from Check-in date
   Online Reservation (Activity)	[Required] Full name, mobile phone number, email address Verification of identity Notification of reservation information Handling inquiries and complaints [Optional] Age, Gender, Additional contact information Verification of identity and provision of customer service Notification of reservation information [Method of collection] Website(Web/App) [Period] 1 year after the date of service use
   Online Reservation (Dining, Promotion)	[Required] Full name, mobile phone number, email address Verification of identity Notification of reservation information Email address, mobile phone number Provide reservation information Notification of reservation information/Satisfaction level survey [Method of collection] Website [Period] 3 months from date of use
   Dining Reservation	[Required] Full name, mobile phone number, email address Verification of identity for membership service Notification of reservation information/Satisfaction level survey [Method of collection] Phone [Period] 3 months from date of use
   31Geumryong Reservation	[Required] Mobile phone number, email address To make reservation at Geumryong Samil Building branch [Method of collection] online [Period] 3 months
   Banquet Reservation	[Required] Full name, mobile phone number, mailing address Verification of identity for membership service Inquire and advise on the event, confirm and carry out the event, keep records [Optional] Date of birth Provide service and use for the statistics on use of membership service Mailing address Deliver details on the event [Method of collection] Written [Period] 3 year
   Store	[Required] Full name, mobile phone number, email address, mailing address Verification of identity Verification of payment Credit card information(number, expiration date) Payment for product purchase(Used only for payment and not stored in the system) Refund account information (account holder name, account number, bank name) To process refund for bank transfer payment [Method of collection] Website [Period] 5 years from the date of delivery completion [Required] Name, contact information, email address To review and respond to bulk purchase inquiries [Method of collection] Website [Period] 3 years from the response completion date
   Employee authentication	[Required] Name, employer's name, employee ID, email address To verify employment status of executives/employees for service provision [Method of collection] Website [Period] 1 years
   Event	[Required] Full name, mobile phone number Notify event prize winners Secure a smooth communications channel(e.g., send notices, handle inquiries/complaints) [Optional] Date of consent for receiving marketing/promotional messages, consent items (SMS, e-DM, TM) Statistics on use of membership service Marketing activities for hotel services, promotions & events, through SMS and, e-DM [Method of collection] Website/event brochure [Period] 1 year after the end of the event
   Exchange (Foreign Exchange Transactions)	[Required] Name, Nationality, Passport Number Exchange, Report on Foreign Exchange Transactions [Method of collection] Written [Period] 5 year

   • In the process of using service, the following personal information items may automatically be created and collected.
     • IP address, cookie, MAC address, service usage records, visitation records, content of inquiry phone calls, etc.
2. "Walkerhill" can access and use the information and functions of membership members' mobile communication terminals as follows to provide the mobile app service. =

   단말기 내 정보 사용

   Category	Option
   Item to access	Information for biometric authentication (Fingerprint, Face recognition)
   Purpose to access	Use login and easy authentication service For the convenience of members, we use fingerprint and face login method, but only verify random authentication values and do not collect additional personal information.
   Remarks	Able to use the basic service without consent to the optional access authority.

4. Period of processing personal information

1. When a request for withdrawal from website or for deletion of personal information is made, Walkerhill shall immediately process the request so that the collected personal information may not be viewed or used. However, the member's ID shall be kept for the purpose of website subscription history management.
2. At the time of termination, if applicable laws such as the Commercial Act require a longer period of keeping personal information, then Walkerhill may keep transaction details and minimum basic information for the period prescribed by the law. Walkerhill may also keep personal information for a longer period if notified in advance or obtained individual consent or agreement. In which case, Walkerhill may only use that information for the relevant purpose. The periods of keeping personal information are as follows.
   1. Records on contract or offer withdrawal, etc

      Basis

      Act on Consumer Protection in E-Commerce

      Period

      5 years

   2. Records on payment and supply of the Goods

      Basis

      Act on Consumer Protection in E-Commerce

      Period

      5 years

   3. Records on handling of consumer's complaints or disputes

      Basis

      Act on Consumer Protection in E-Commerce

      Period

      3 years

5. Destruction procedure and method of personal information

After the purpose of collecting and using personal information is achieved, Walkerhill shall promptly destroy the relevant information according to the period of keeping and using personal information, based on the principle of timeliness. Specifics for the destroying procedure, period, and method are as follows.

1. Destruction procedure

   Information entered for membership subscription, etc., after the purpose thereof is achieved, shall be stored for a certain period, and then destroyed according to internal policies and applicable laws. Such personal information may not be used for any purpose other than to keep it, unless prescribed by the law.

2. Destruction period

   Personal information, when the period of keeping it has elapsed, shall be destroyed within 5 days after the end of such period. Personal information which is no longer unnecessary(e.g., purpose of processing personal information being achieved, service being discontinued, business being closed) shall be destroyed within 5 days after the date on which processing of the personal information is deemed unnecessary.

3. Destruction method

   1. Print-out personal information shall be incinerated or shredded by a shredder.
   2. Personal information stored in the form of an electronic file shall be deleted by a technical method that disallows reproduction of the records.

6. Collection of personal information by use of cookies

1. Walkerhill operates cookies that store and, from time to time, retrieve the user's information. A cookie is a tiny amount of information transmitted by a website to the user's web browser(e.g., Internet Explorer, Chrome). When a member logs in to website, Walkerhill's server reads the content of cookies residing in the user's web browser, retrieves the additional information, and provides services. Such cookie information will be used to provide the members with useful, more convenient, and tailored services. Cookie information can identify the user's computer, but it cannot identify a specific user.
2. A user may choose whether to use the cookies. A user, by setting options in the web browser, may permit all cookies, require confirmation whenever the cookie is stored, or refuse storage of any cookies.
   • How to set cookies : (in Internet Explorer) Tools(upper side of Web browser) > Internet options > Privacy
     (In Microsoft Edge): Settings (top right) > Cookies and Site Permissions
     (In Google Chrome): Settings (top right) > Privacy and Security
   If a user refuses storage of cookies, however, then the provision of certain services may be restricted.

7. Protection of personal information of children below 19 years of age

Walkerhill may not collect personal information of a child under the age of 19, and a child under this age cannot become a member. When collecting the personal information of minors under 14, we obtain consent from their legal representative for processing. We may collect the legal representative's information, including name and contact number, from the minor. However, the legal representative's collected personal information representative shall be used only to obtain consent for collecting the minor's personal information and will be destroyed if the consent is not obtained in 5 days.

8. Provision of personal information to a third party

Walkerhill shall only process personal information to the extent which specified in the purpose of personal information processing. Walkerhill shall only provide this personal information to a third party pursuant to Articles 17 and 18 of the Personal Information Protection Act.

Provision of personal information to a third party

Recipient of personal information	Personal information provided, Recipient's purpose of use, Recipient's period of use
SK Telecom	Personal information provided T membership number Recipient's purpose of use Offer payment service Recipient's period of use Until T membership expiration date
Asiana Airlines	Personal information provided Asiana member no Recipient's purpose of use Personal identification process for the membership service Asiana mileage saving / conversion Recipient's period of use 3 years from the collection
JAL	Personal information provided Customer name (ENG), JAL member no. Recipient's purpose of use Personal identification process for the membership service JAL mileage saving Recipient's period of use 3 years from the collection
Singapore Airlines	Personal information provided Customer Name (English),  SIA (S'pore) No. Recipient's purpose of use Verification procedure for membership services and saving SIA mileage Recipient's period of use 3 years from the collection
Hyundai Department Store Co., Ltd.	Personal information provided Walkerhill Rewards Member number, Remaining points, Convertible points, Points requested for conversion Recipient's purpose of use To verify Walkerhill Rewards membership status, check point balance, and convert points Recipient's period of use Until membership withdrawal or service cancellation (However, after withdrawal is confirmed, the information will be retained and used only to the extent necessary for incident investigation, dispute resolution, complain handling, and compliance with legal obligations related to the purposes stated above.)

9. Personal information handling contractors and the service scope

Walkerhill has appointed specialized contractors to maintain and manage services for the members, consult customers, and handle customers' inquiries. The contractors may not use the personal information outside of the purpose of contracting. To prevent illegal use of the personal information, Walkerhill regularly monitors and supervises these contractors. When appointing any specialized contractor to perform some part of its job, Walkerhill shall notify in advance. Personal information handling contractors are as follows

Contractors and the Service Scope

Contractors	Service Scope	Period of Personal Information Use and Retention
Infinity Consulting	TM and membership management(Walkerhill Prestige Club)	Until membership withdrawal or termination of the consignment agreement
SK Inc. AX	Computer-processing and maintenance of information
SK Inc. AX (re-trustee: Microsoft Korea)	Storing data (in Korea)
Daou Tech	Maintenance of text message sending program
Lotte global logistics	Shipping of product
Logen logistics	Shipping of product
ADT CAPSTEC	Operation and management of fixed image data processing equipment
Netpathy	Maintenance of e-DM sending program
Korea Information & Communication Co., Ltd	Purchase and Payment
Amadeus Hospitality	Maintenance of banquet operating system
Pentabreed Inc.	Website Management, Maintenance of electronic subscription application system
Health Connect Inc.	Wellness Program Operation and management
Cnet technology	Maintenance of recording system
BIZTALK Co., Ltd	KakaoTalk Message dispatch program maintenance
SK broadband CO.LTD.	Management of information on blocking of message services
TableCheck	Dining outlet reservation program operation and management
WHONEED	Room maintenance and order taking service
Nexus Community	Maintenance of recording system
ntelslabs	Operation and maintenance of store homepage, maintenance and management of the system
SEKWANGFOOD	Agency for distribution service
UCESS PARTNERS	Booking service agency for Pizza Hill and The Buffet
Dowhat	e-Reg (electronic registration card) system maintenance/management at the front desk
Early sloth	Walkerhill GEI (customer satisfaction survey) system maintenance/management
Ujung Info system	Credit card payment program maintenance/management at the front desk
BADA RENTCAR	Wedding customer transportation (Shop pick up & Airport sending)
KYUNGSUNG RENT A CAR	Wedding customer transportation (Shop pick up & Airport sending)
Daekyung F&B Co., Ltd.	Agency for distribution service
DBWD Co., Ltd.	Agency for distribution service
Blooming Korea Co., Ltd.	Agency for distribution service
Neulpoommaru	Agency for distribution service

10. Information-owner's rights and method of exercising them

1. An information-owner may at any time exercise the following rights related to personal information protection against Walkerhill.
   1. Request viewing of personal information
   2. Request correction of personal information if there is any change, error, etc
   3. Request deletion of personal information
   4. Request suspension in the processing of personal information
2. Exercise of rights under Section 1 may be made against Walkerhill in writing, by email, by facsimile, etc., under Form No. 8 and No. 11 of the Personal Information Protection Act Enforcement Rule, and Walkerhill shall promptly take relevant measures
3. If an information-owner requests that personal information error be corrected or deleted, then Walkerhill may not use or provide the relevant personal information until the correction or deletion is completed.
4. Exercise of rights under Section 1 may be made through an legal representative or entrustee. In that case, power of attorney under Form No. 11 of the Personal Information Protection Act Enforcement Rule shall be submitted.

11. Terms of Cross-border Transfer of Personal Information

The Company entrusts personal information to overseas entities as outlined below to provide customer services.

Terms of Cross-border Transfer of Personal Information

Recipient of Personal Information	Tablecheck	Salesforce
Transfer country	Japan	USA
Data management officer and contact information	Alexander Nicholson / dpo@tablecheck.com Dai-27 Chuo Bldg 4th floor 2-14-5 Ginza Chuo-ku, Tokyo, Japan 104-0061	Salesforce Data Protection Officer 415 Mission St., 3rd Floor San Francisco, CA 94105, USA Email: privacy@salesforce.com Phone: 1-844-287-7147
Time and method of personal information transfer	Transferring to remote sites over a network during dining reservations	Transferring reservation inquiries to remote sites over a network
Personal information items to be transferred	Customer name, mobile phone number, email address	name, email address, mobile phone number
Purpose of use by the recipient of personal information	To verify customer identity and inform them of reservation details during dining reservations	To respond to reservation inquiries
Term of use and retention by the recipient of personal information	3 months	3 years

12. Measures to secure stability of personal information

Walkerhill takes the following technical/administrative and physical measures necessary to secure stability under Article 29 of the Personal Information Protection Act.

1. Minimize the scope of personal information processing personnel.

   To protect personal information, Walkerhill minimizes the authority of personal information processing personnel.

2. Perform periodic education for personal information processing personnel.

   To enhance awareness of personal information protection, Walkerhill performs periodic education.

3. Perform periodic internal checkups.

   To secure the stability of personal information processing, Walkerhill performs periodic self-checkups.

4. Formulate and implement an internal control plan.

   For safe processing and management of personal information, Walkerhill has formulated and is implementing an internal control plan.

5. Encode personal information

   A member's personal information and password are encoded, stored, and managed. This information is safely managed by use of a separate security function, even during transmission.

6. Technical measures against hacking, etc.

   To prevent personal information leakage or violation due to hacking, computer virus, etc., Walkerhill has installed a security program and conducts periodic upgrade/checkups. Walkerhill has installed a system in outside access-controlled areas through which it conducts technical and physical monitoring and blocking.

7. Restrict access to personal information

   Measures necessary to control access to personal information are being taken by granting, modifying, and canceling access authority to the personal information processing database system. Unauthorized access from the outside is controlled by use of an anti-intrusion system.

8. Keep access logs and prevent forgery/unauthorized alteration thereof

   Walkerhill keeps and manages records of accessing the personal information processing system for a minimum of 2 year. It uses a security function so that access logs are not forged, altered without authorization, stolen, or lost.

9. Use locking device for document security

   Walkerhill keeps documents, auxiliary storage device, etc. containing personal information in a safe place with a locking device.

10. Control access by unauthorized personnel

    Walkerhill has a separate physical location keeping personal information and has established and is operating a control procedure for access to it.

11. Safeguards against disasters and calamities

    We establish and review response procedures, including crisis management manuals, to prepare for disasters and calamities, such as natural disasters.

12. However, the online service shall not be held responsible for members' personal errors or the inherent risks of the Internet.

13. Operation and management of fixed image data processing equipment

Walkerhill has installed and is operating fixed image data processing equipment as follows.

1. Basis/purpose of installing fixed image data processing equipment

   Protect safety of customers/employees accessing Walkerhill and its assets, secure evidence for crimes and various accidents, and secure safety of facilities/users from disasters such as terror or fire.

2. Data on CCTV

   • Number of CCTVs installed : 833
   • Places of installation(areas recorded by CCTVs) : Buildings(inside and outside), rooms, elevators, and parking lots

3. Head personnel, department in charge, and personnel with access authority to the image data

   Data on CCTV

   Installed places	No. of CCTV
   Rooms(GRAND/VISTA)	193(138/55)
   Main Building(GRAND/VISTA)	237(146/91)
   Everywhere else(GRAND/VISTA)	69(55/14)
   Camping Zone/EMERALD	26
   Parking lot	275
   ACADIA	33

   Personnel in charge

   Head personnel

   Lee, Jeong-Shik(Happy Management Team)

   Personnel

   Lee, Chung-Jin

   Contact numbers

   +82-2-450-4422
   +82-2-450-4481

4. Hours of recording, period/place of keeping, and method of processing image data

   • Hours of recording : 24 hours
   • Period of keeping the image data : 30 days from the time of recording
   • Place of keeping, and method of processing, the image data : Kept and processed in the image data processing equipment control room

5. Method and place of checking the image data

   Request the chief personal information officer

6. Measures to take against information-owner's request for image data viewing, etc.

   A request for viewing, or existence confirmation, of personal image data shall be made. Viewing shall only be permitted when the information-owner himself/herself has given this permission or when there is a clear need for the information-owner's life, body, or property interest.

7. Technical, administrative, physical measures to protect image data

   A formulation of an internal control plan to control access and restrict access authority, application of safe storage/ transmission technology for the image data, storage and anti-forgery/unauthorized alteration for processed records, and installation of locking device for a storage facility.

14. Handling of personal information complaints

1. Anyone who decides that Walkerhill is not complying with this Personal Information Policy may contact the chief personal information officer or the personal information manager mentioned below. Walkerhill shall immediately check for problems and if there is any need for correction, and will then endeavor to take measures as shortly as possible. Walkerhill welcomes members' opinions concerning their personal information and is formulating procedures and methods for handling complaints.
2. Anyone who wishes to report or inquire about personal information violation may contact the Personal Information Violation Reporting Center. Any member incurring monetary or mental damages from personal information violation may request relief before the Personal Information Dispute Mediation Committee. For any other inquiries on personal information, please inquire about the Personal Information Violation Reporting Center, Personal Information Protection Committee, Supreme Public Prosecutor's Office Internet Crime Investigation Center, Cyber Terror Response Center, National Police Bureau of Cyber Investigation, etc.

• Personal Information Infringement Notification Center

  Business affairs

  Complaints of personal information infringement, consultation

  Website

  privacy.kisa.or.kr

  Telephone

  (without area code) 118

  Address

  (58324) Jinhung Road, Naju City, Jeollanam-do 9

• Personal Information Dispute Mediation Committee

  Business affairs

  Personal information dispute settlement application, collective dispute settlement(civil settlement)

  Website

  www.kopico.go.kr

  Telephone

  (no area code) 1833-6972

  Address

  (03171) 12F, Government Complex-Seoul, 209 Sejong Daero Road, Jongno-gu, Seoul

• Cyber Investigation Division, Supreme Prosecutors' Office

  Telephone

  (no area code) 1301

  Website

  www.spo.go.kr

• Korean National Police Bureau of Cyber Investigation

  Telephone

  (no area code) 182

  Website

  ecrm.cyber.go.kr

15. Chief personal information officer

To protect members' personal information and handle personal information-related complaints, Walkerhill has designated a chief personal information officer. Any member with inquiries on personal information may contact the below-mentioned chief personal information officer/personal information manager, who shall speedily answer any inquiries to the best of his or her ability.

• Chief personal information officer

  Name

  Lim, Jae-Chang

  Department

  Management Support Division

  Position

  Head of Management Support Division

  Email

  contact@walkerhill.com

  Phone

  +82-2-1670-0005

• Personal information manager

  Name

  KIM, Kyu-Moon

  Department

  IT Team

  Position

  Manager

  Email

  contact@walkerhill.com

  Phone

  +82-2-1670-0005

16. Announcement of policy changes

1. This Personal Information Policy shall be posted on the Homepage's main screen so that the members can easily view it at all times.
2. For any addition, deletion, or change in any terms of this Personal Information Policy due to changes in the law, policy, or security technology, the reason and relevant content shall be announced on the Homepage 30 days before the amendment becomes effective. For any other changes, the reason and content thereof shall be announced at least 1 week in advance.
3. This Personal Information Policy may be amended from time to time, so members shall check it upon every visit of the Homepage.

17. Information protection activities

ISMS-P(Personal Information & Information Security Management System) certification profit

Scope of Authentication

Walkerhill Hotel & Resorts Service

Effective Period

2024.12.15 ~ 2027.12.14

[Laws] 1.(Effective Date) This Privacy Policy is effective from February 15, 2025.