TOTO Booking Co., Ltd. (hereinafter referred to as the Company) places great importance on the protection of users' personal information and does its best to ensure that the personal information provided to the Company online is protected at the same time as users use the Company's services.
Accordingly, the Company complies with the personal information protection regulations and guidelines established by the Ministry of Science and ICT, including the Communications Secrets Protection Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization and Information Protection.
The company will inform you of the purpose and method of personal information provided by users through the personal information processing policy and what measures are being taken to protect personal information.
The company is taking measures to make it easy for users to see it at all times by disclosing the personal information processing policy on the first screen of its website.
The company's personal information processing policy can be changed from time to time due to changes in the government's laws and guidelines or the company's internal policy, and accordingly, the necessary procedures are established for continuous improvement of the personal information processing policy.
In addition, if the personal information processing policy is revised or the personal information processing policy is changed, it is notified through the personal information processing policy on the first page of the site. Users should check it frequently when visiting the site.
The company's personal information processing policy includes the following.
The term "personal information" means information about a surviving individual that can be identified by the name, social security number, etc. included in the information (including those that can be easily combined with other information, even if the relevant information alone cannot identify a specific individual).
Most services can be used at any time without separate user registration. However, the company collects user's personal information to provide users with more improved quality services, including customized services, through member services. The company does not disclose user's personal information without the user's prior consent, and the collected information is used as follows.
① Required items : ID, password, name (Korean/English), email, nickname, phone number, gender, date of birth
① Required items : Email, name
② Optional items : None
① Required items : None
② Optional items : Email, name
① Required items : Name, phone number (Kakao account), gender, date of birth, email (Kakao account), nickname
② Optional items : Status and history of adding Kakao channels, Kakao message transmission
① Required items : Name, phone number, gender, date of birth, email
② Optional items : Profile picture
① Required items : Name (Korean/English), date of birth, email, phone number
② Optional items : None
① Required items : Email, name (Korean/English), email, phone number
② Optional items : Passport number, KakaoTalk ID, Line ID, address in Korea, emergency contact (name), departure date, flight name, pickup/drop-off place, date of birth, gender
① Credit card : Card company name, card number, validity period, etc.
② Refund account number : Bank name, account number, account holder name
In addition, we may request selective personal information input for statistical analysis, prize distribution, etc. during surveys or events in the site.
However, sensitive personal information (such as race and ethnicity, ideology and beliefs, hometown and registered domicile, political orientation and criminal record, health status, and sexual life) that could infringe on users' basic human rights will not be collected. If collection becomes unavoidable, users' prior consent will be obtained. In all cases, information entered will not be used for any purpose other than that previously disclosed to users and will not be shared externally.
The company continuously retains and uses the personal information of the users while the users use the services provided by the company as a site member.
However, in accordance with the procedures and methods described in "6. Rights of users and legal representatives and their exercise methods", information deleted or modified by the member, or information for which a membership withdrawal has been requested, will be permanently deleted from storage using a non-recoverable method and will no longer be accessible.
As described in "3. Items and methods of collecting personal information", personal information collected for temporary purposes (surveys, events, identity verification, etc.) will be similarly destroyed in a non-recoverable manner once the purpose has been fulfilled.
In principle, your personal information shall be destroyed once the purpose of collection or provision has been fulfilled. However, to prevent the recurrence of illegal use by fraudulent members, the Company may retain the national identification number of such members for one year from the date of termination of the service agreement.
In addition, if it is necessary to preserve it in accordance with the provisions of related laws, such as the Commercial Act and the Consumer Protection Act in Electronic Commerce, the company keeps member information for a certain period of time set by the relevant laws.
Users and legal representatives can view or modify their own or the personal information of a child under 14 at any time, and can request cancellation of registration.
In order to view and modify the personal information of users or children under 14, click "Member Information Correction" in the member information correction, or click "Member Withdrawal" to go through the self-identification process, and then directly view, correct, or withdraw.
Or contact the personal information management responsible person by mail, phone, or email, and we will take action promptly.
If you request correction of the personal information, the personal information will not be used or provided until the correction is completed.
If the personal information is already provided to a third party, the correction processing result will be notified to the third party immediately.
The company processes the personal information deleted or terminated by the request of the user or legal representative for the purpose of retention and use of the personal information collected by the company.
The company uses "cookies (cookie)" to store and recall the information of the users in order to provide personalized and customized services to the members and to each individual member.
This is designed to not be stored automatically on the computer and deleted when logged out (Logout), so if you use a computer that can be used by the public or others, please log out (Logout) after using the service.
Analysis of access frequency and visit time, etc. of members and non-members, identification of users' preferences and interests, tracking of users' movements, identification of the number of visits to various events, etc. to provide target marketing and personalized services
By selecting the options in your web browser, you can allow all cookies, go through a check each time you save them, or deny all cookies. However, if you refuse to install cookies, you may have difficulty providing services.
The company also allows non-members to purchase goods and services.
The company requests only the personal information necessary for delivery and payment of money, and delivery of goods from non-members.
The personal information entered by the non-member customer when purchasing as a non-member is not used for any purpose other than the purpose related to payment and delivery of goods.
In order to improve the service, the Company may entrust the collection, handling, and management of personal information to a third party in compliance with applicable legal requirements, including obtaining consent where required.
Regarding the processing of personal information, the Company entrusts the following tasks and stipulates necessary requirements to ensure that personal information is safely managed in accordance with applicable laws. The information shared is limited to the minimum necessary to achieve the stated purpose.
| Service area | Recipient | Items provided | Purpose of use of recipient | International transfer | Period of retention and use |
|---|---|---|---|---|---|
| Air | Hana Tour and domestic and international airlines | English name, date of birth, gender, contact information (email/phone), passport information (English name, passport number, passport expiration date), airline mileage information, payment information | Determine the availability of departure for air tickets | Different by company | Period of retention and use of services provided and related laws and regulations |
| Accommodation | Accommodation companies (hotels, resorts, etc.), cooperating companies | English name, contact information (email/phone) | Accommodation reservation/check | Different by company | Period of retention and use of services provided and related laws and regulations |
| Golf | Golf courses, cooperating companies | English name, contact information (email/phone) | Golf related product reservation/check | Different by company | Period of retention and use of services provided and related laws and regulations |
| Tour (Show, Spa, Meal, Entry Ticket) | Tour organizer, cooperating companies | English name, contact information (email/phone) | Tour related product reservation/check | Different by company | Period of retention and use of services provided and related laws and regulations |
| Travel insurance | Aice Insurance / Tour Safe | English name, date of birth, gender, passport number | Travel insurance registration | No related matters | 5 years after insurance registration |
The Company collects minimum essential information from customers for business such as providing travel products, reservation services, and shall not use all personal information provided for any purpose other than that purpose unless otherwise agreed. Personal information is provided under limited conditions only for companies directly involved in customer service performance, and the contents are as follows.
| Recipient of provision/transfer | Contact information | Transfer country | Items provided/transferred | Purpose of provision/transfer and period of retention and use |
|---|---|---|---|---|
| TOTOBOOKING CO.,LTD | [email protected] | Thailand | Reservation information: name, contact information, e-mail, gender, date of birth Traveler information: name (English), gender, age (only for children) | Purpose of provision: product reservation and check, related inquiry response Period of retention and use: 2 years after contract termination or until the period of retention in accordance with related laws and regulations |
| TOTOBOOKING CO.,LTD | [email protected] | Vietnam | Reservation information: name, contact information, e-mail, gender, date of birth Traveler information: name (English), gender, age (only for children) | Purpose of provision: product reservation and check, related inquiry response Period of retention and use: 2 years after contract termination or until the period of retention in accordance with related laws and regulations |
| TOTO booking&tours inc | [email protected] | Philippines | Reservation information: name, contact information, e-mail, gender, date of birth Traveler information: name (English), gender, age (only for children) | Purpose of provision: product reservation and check, related inquiry response Period of retention and use: 2 years after contract termination or until the period of retention in accordance with related laws and regulations |
| TOTOBOOKING CO.,LTD | [email protected] | Taiwan | Reservation information: name, contact information, e-mail, gender, date of birth Traveler information: name (English), gender, age (only for children) | Purpose of provision: product reservation and check, related inquiry response Period of retention and use: 2 years after contract termination or until the period of retention in accordance with related laws and regulations |
| TOTOBOOKING GUAM CO.,LTD | [email protected] | Guam/Saipan | Reservation information: name, contact information, e-mail, gender, date of birth Traveler information: name (English), gender, age (only for children) | Purpose of provision: product reservation and check, related inquiry response Period of retention and use: 2 years after contract termination or until the period of retention in accordance with related laws and regulations |
We are collecting opinions from users regarding personal information protection, and we have all procedures and methods in place to handle complaints.
Users can report complaints by phone or e-mail by referring to the contact information for the person in charge of personal information management listed in section 13 below, and we will respond promptly.
We are doing our best to ensure that you can safely use good information.
In case of an accident that violates the matters notified to you regarding the protection of personal information, the personal information management responsible person will be responsible.
The Company is taking the following measures to ensure the security of personal information in accordance with Article 30 of the Personal Information Protection Act Enforcement Regulations (Measures to Ensure the Security of Personal Information).
We are conducting regular self-audits (quarterly) to ensure the security of personal information related to personal information handling.
We are implementing a plan to minimize the number of employees handling personal information by designating a person in charge and limiting it to the person in charge.
We are installing security programs, regularly updating and inspecting them, installing systems in areas controlled from the outside, and monitoring and blocking them physically and technically.
The password is encrypted and stored and managed for the user's personal information, so only you can know it, and important data is used with separate security functions such as encrypting files and transmission data or using file lock functions.
We keep and manage records of accessing the personal information processing system for at least six months, and we use security functions to prevent forgery, theft, or loss of access records.
Necessary measures are taken to control access to personal information by managing the granting, modification, and revocation of access rights to personal information processing systems, and unauthorized external access is blocked using an intrusion prevention system.
The contents of the current personal information processing policy will be notified through the 'Notice' section of the homepage when there are additions, deletions, or modifications to the contents due to changes in government policies or security technologies.