Privacy Policy We, GoldOne Hotel & Suites (also hereinafter referred to as the “Company”), use our best efforts to protect your privacy and personal information, and to that end the Company is committed to complying with the Promotion of the Use of Information and Communication Networks and Protection of Information Act (the “Information and Communication Networks Act”), the Privacy Protection Act and all other relevant laws and regulations. This Privacy Policy is posted for public access on the Company’s website(http://www.goldonehotel.com)so you can be well informed of what we do to protect your personal information. This Privacy Policy may be revised or updated from time to time according to changes to pertinent laws, government policies or the Company’s internal regulations and we will immediately notify you of such revisions or updates in order that you can be readily aware thereof. The Company’s Privacy Policy contains the following: • Date implemented: 2022-05-02 • 1. Collection of Personal Information; Purposes of Collection; Items to Be Collected; and Methods of Collection • 2. Disclosure and Sharing of Collected Personal Information • 3. Outsourcing the Handling of Personal Information • 4. Collection of Personal Information by the Use of Cookies • 5. Retention and Destruction of Personal Information • 6. Rights and Obligations of Users and Exercise of Rights • 7. Measures for Security of Personal Information • 8. Gathering of Opinions and Handling of Complaints • 9. Privacy Officer • 10. Privacy Protection for Children under the Age of 14 • 11. Transmission of Advertising Messages • 12. Linked Sites • 13. Posts • 14. Changes to the Privacy Policy 1. Collection of Personal Information; Purposes of Collection; Items to Be Collected; and Methods of Collection A. When you sign up for the Company’s membership, we collect your personal information as may be required to identify you and provide e-commerce services. The personal information to be collected by the Company is as follows: Item Purpose Period Full name, username, password, contact number, e-mail address To confirm your identity, provide membership services, take reservations and deliver the hotel’s gifts Until withdrawal from membership or delivery; or for five (5) years after room stay B. When you sign up for a Hotel’s membership, we selectively collect the following personal information from you: Item Purpose Period Date of birth, gender, mailing address, contact number and anniversaries To provide benefits for anniversaries, promote products and services; and investigate customer satisfaction. Until withdrawal from membership or for five (5) years after room stay C. When you are using online services, we may collect such information as your IP address, service-use history and billing information (i.e., credit card number, bank account number, gift card number, mobile-service payment authorization code, etc.), only for the purposes of making such services available and/or verifying your financial transactions. D. We collect your personal information from your application of the membership on our website, written notices, facsimile or phone communications, online messages, your application to our promotional events and/or any other communications. 2. Disclosure and Sharing of Collected Personal Information A. We will not use or disclose to any third party any of your personal information, without your consent or except as required by law, for purposes other than those intended hereunder and specified herein. B. If any business relation is formed through the services we provide, relevant information will be disclosed to the parties in question to the extent necessary for the conduct of transactions, subject to members' consent. C. In the event that the rights and obligations of a service provider is fully assigned or transferred as a result of sale, merger or acquisition, we will ensure that we inform you in advance of details of the reasons and procedures for such assignment or transfer and that you have the right to withdraw your consent to the use of your personal information. D. Where your personal information is to be disclosed or shared, we will seek your consent in advance by notifying you by email or otherwise in writing of what items of such information will be disclosed or shared, whom the information will be disclosed to or shared with, why it should be disclosed or shared, and how and how long it will be protected and managed. The same procedures will apply in case the information recipient is changed. E. Your personal information may be disclosed without your consent in accordance with applicable provisions of relevant laws: - when needed to perform a contract relating to the provision of services; - when duly and reasonably requested by an investigation authority for investigation purposes; or - when made available in unidentifiable form for the compilation of statistics or for academic or market research purposes. 3. Outsourcing the Handling of Personal Information We may share the collected personal information of customers with an external business/company to provide a better service. In such incidents, the Company will promptly notify the customers about the external business/company and details of the consignment for prior consent. 4. Collection of Personal Information using Cookies A. Use of Cookies We use Cookies for the convenience of users. The information we collect through Cookies includes your username and IP address and is used to keep you logged in and display personalized advertising messages. B. Installation and Use of Cookies; and Refusal of Use You have the option to accept or decline the installation of cookies and may set your web browser to accept all Cookies, alert you whenever a cookie is stored, or disable or block the storage of cookies. Disabling or blocking the storage of Cookies may limit your access to services requiring you to log in. 5. Retention and Destruction of Personal Information The Company will retain your Personal Information until the purposes of collection or disclosure of such information are accomplished and will destroy your Personal Information immediately when such purposes are accomplished or upon the expiration of a retention period permitted by your consent. The times when we are required to destroy your personal information are as follows: - Your membership information is destroyed when you withdraw or are dismissed from GoldOne Hotel & Suites membership. - Your delivery information is destroyed when a product or service has been delivered or provided. - Your information collected for a survey or promotional event is destroyed upon when such survey or event is over. - The information used to identify you is destroyed when your identity has been verified. Notwithstanding the foregoing, when any of your personal information needs to be retained under relevant laws or internal regulations, we may retain such information (i) for a period of five (5) years if it pertains to the revocation of contracts or subscriptions; (ii) for a period of five (5) years if it relates to the supply of goods or services and payments therefor; or for a period of three (3) years if it pertains to the handling or resolution of complaints or disputes. 6. Rights and Obligations of Users and Exercise of Rights A. You have the right at any time to view, correct or delete your registered Personal Information, have it corrected or deleted, have its processing suspended or withdraw your consent to the use and disclosure thereof, directly on the our website or by contacting our Privacy Officer in writing, by telephone (at 064-801-5000) or by email, in which case we will respond forthwith after identity verification. B. If you request that we correct an error in your registered personal information, such information will not be employed or disclosed until such correction is made accordingly. Where any incorrect part of your Personal Information has been disclosed to any third party, we will have it corrected by giving immediate notice to such third party. 7. Measures for Security of Personal Information In handling your Personal Information, we use our best efforts to prevent such information from being lost, stolen, leaked, falsified or damaged by taking the following technical, administrative and physical measures for security assurance: - Minimum number of information workers and training Personal Information is made accessible to the smallest possible number of people and regular training is provided to such people. - Regular in-house audits In-house internal audits are conducted on a regular basis for the security of personal information. - Internal management plan An internal management plan is developed and implemented for safe handling of personal information. 8. Gathering of Opinions and Handling of Complaints A. We value your opinion and feedback, and you are entitled to have your questions answered in a professional manner. B. All inquiries can be made by email, fax or mail and we will endeavor to respond within 24 hours of receipt thereof. However, if received after working hours or during weekends and holidays, such inquires will be dealt on the following business day. C. If you want to report a breach of your privacy or seek advice thereon, please contact: - The Privacy Complaint Centre (via privacy.kisa.or.kr or at 118) - The Supreme Prosecutors' Office High-tech and Financial Crimes Investigation Division (via www.spo.go.kr or at 1301) or - The National Police Agency Cyber Bureau (via www.ctrc.go.kr or at 182) 9. Privacy Officer The Company has appointed the following person to be responsible for protecting its customers’ privacy and personal information and for gathering their opinions and handling their complaints: - Appointed as : Privacy Officer - Name : - Department : - Title/Position : - Phone Number : 064-801-5000 - Email Address : info@goldonehotel.com 10. Privacy Protection for Children under the Age of 14 The Company does not collect any Personal Information of our customers' children under the age of 14 in compliance with the Juvenile Protection Act. If we need to collect Personal Information of the minors under the age of 14 with respect to our hotel business, we will obtain consent from their legal representatives or guardians. 11. Transmission of Advertising Messages A. We do not send you any advertising messages for commercial purposes so long as your unsubscribe request is expressly given. B. If we send any advertising message by email or otherwise for online marketing purposes such as presenting product information, we will ensure that in a plain and legible manner: - 'The email's subject line communicates what the email is about, although it may not indicate “Advertisement” and - The body text contains the sender’s name, email address, phone number and mailing address, as well as instructions on how to unsubscribe, so that the recipient can readily unsubscribe from further advertisements. C. Likewise, if we send you an advertising message for commercial purposes by fax or mobile text message or via non-email means, we will ensure that the sender’s name is indicated in such message, even if you have agreed to the receipt of advertising messages. 12. Linked Sites A. We may provide you with links to websites or materials of other companies, in which case we assume no responsibility for and make no guarantee as to the quality of such websites and materials over which we have no control. B. If you move to another website by clicking a link appearing on the Company’s website, we recommend that you carefully read the privacy policy of such website, as it is beyond the control of GoldOne Hotel & Suites. 13. Posts A. We value the comments, suggestions, opinions, statements and other content posted by our customers (collectively “posts”) and use our best efforts to protect such posts from being tampered with, damaged or deleted. Notwithstanding, this does not apply to the following: - Spam-like messages (e.g., chain letters and advertisements) - Posts that defame others by disseminating false information to slander them maliciously and - Posts that reveal the identity of other users without their consent, infringe on third parties’ copyrights or other rights or are irrelevant to the themes of the bulletin board - If a post is found to reveal the identity of other users, the Company may delete or correct part of such post in order to maintain and promote a healthy online community culture. - If the content of a post is deemed movable to another section, the Company will provide a path in such posts to avoid misunderstanding or confusion. - The Company may delete other posts deemed malicious or improper after giving express or individual warnings B. Essentially, you have the rights to your posts and are responsible for them. It is difficult for the Company to protect information you disclose voluntarily via a post, so we recommend that you give careful consideration before such disclosure. 14. Changes to the Privacy Policy If any change is made to this Privacy Policy by addition, deletion or correction due to a modification or revision in relevant laws, government policies or the Company’s internal regulations, or a change of security technology, the Company will post such change immediately on its website. This Privacy Policy shall come into full force and effect on the 2nd of May 2022.