Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar Jet") considers the protection of users' personal information important and complies with regulations for the protection of personal information in relevant legislations such as "Personal Information Protection Act" and "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc."

The Company informs how and for which purposes the Company uses personal information offered by users and measures the Company takes to protect personal information by notifying the following personal information handling policy. The Company's Personal Information Handling Policy may change depending on changes in legislation and announcement or the Company's terms and conditions and internal policy; in cases of revision, the Company notifies changes to users or posts changes on the service screen.

Users are entitled to withhold consent for the collection, use, provision and consignment of the following personal information. However, when users withhold consent, whole or partial services cannot be used.

1. Purposes of personal information collection and use

Eastar Jet shall not use the personal information of the subject beyond the scope this article describes except for cases the subject of personal information agreed to or is defined by relevant laws.

A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline tickets, delivery of various products such as airline tickets and souvenirs and events, granting and reviewing qualification as best members, providing customized services, verification of bank transactions and banking services, purchase and collection of fees

B. Membership administration

Member verification regarding the membership service details, individual identification, protection from misuse by delinquent members and protection from unauthorized use, confirmation for the voluntary sign-up, limitation of sign-up and number of sign-ups, record preservation for resolution of the future dispute, complaints and requested issue handling, delivering of notifications

C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized services, service offering and advertisements according to the attributes of demographic research, provision of information on products by the company and affiliates, identification of access frequency, statistics regarding the use of service by members, and delivering advertising information and providing participation opportunity in the events. (User personal information is not provided to individuals or groups which request advertising.) Separate consent is required for use of personal information for marketing and advertising purposes. Even when the user refuses to give such consent, there will be no restrictions in the use of services.

D. Inquiries related promotion affiliation
Collection of information related to promotion and other marketing activities

2. Collected personal information

Eastar Jet collects the minimum personal information necessary to provide services.

A. Membership on the website ( www.eastarjet.com)

※ In the case of a subscription to preferred membership, "company name" will also be collected.

B. Ticket reservation and payment by members and non-members

C. Other services

D. The following information can be created and collected in the process of using services or business

- Records of using services, Access log, Access IP, Payment records

E. In applying for an event

- ID, Name, Address, Gender, Date of Birth, Contact number (Mobile phone number or -email)

※ The personal information subject to collection may vary depending on the purpose and requirement of each event.

3. Consent to Transfer of Personal Information to a Third Party

Eastar Jet uses a user's personal information to the extent notified in "Collection and Use of Personal Information." The Company does not use the information beyond that extent nor provide a third party with personal information without prior consent from the user. Exceptions to this are made in exceptional circumstances, such as where the user has given prior consent to the disclosure or provision of his or her personal information to a third party. Easter Jet is also obligated to provide a user's personal information in accordance with the law, or where a request has been made by crime investigation agencies or supervisory authorities pursuant to the procedure and methods of applicable laws for the purpose of crime investigation or inspection. These cases, however, are exceptions.

4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the implementation of contracts and provision of services to external companies as follows:

▼ Status of associated companies(Ground Handling Company)

5. Overseas Transfer of Personal Information

Eastar Jet will transfer personal information overseas as follows to operate its reservation and transportation system. A user has the right to refuse to consent to such overseas transfer of personal information. If a user refuses to consent to overseas transfer of personal information, however, then the purpose of such overseas transfer cannot be achieved. Thus, there may be difficulties in the use of services.

6. Period for possession and use of person information

Eastar Jet possesses and uses customers' personal information for the period of providing services. When a user withdraws membership, the collected personal information is immediately destroyed to prevent its use or browsing of the information. However, when it is necessary to preserve the information in accordance with applicable laws, the information is preserved in accordance with such laws.

7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is as follows:
A. Destruction process

- Any personal information entered by a user for purposes such as membership subscription, after achievement of the purpose, will be destroyed for reasons of information protection. This is done as prescribed in Eastar Jet's internal policies and relevant laws.

- The aforementioned personal information, unless pursuant to relevant laws, will not be used for any purpose other than that of possessing the information.

B. Destruction method

- The personal information stored in the form of electronic file will be deleted using a technique which makes it impossible for the deleted information to be retrieved. The personal information printed on paper will be destroyed by shredding or incineration.

C. Introduction of the personal information usage period system

- To protect the personal information of any person not using the service for a long period (1 year or longer), Eastar Jet shall classify those non-users as a dormant account from June 5, 2019, in a way to safely separate and retain the personal information.

Based on the final log-in date, the period of non-use (1 year) is calculated to separately keep the personal information of the non-users and the relevant contents shall be notified to the applicable user through e-mail and others at least one month in advance.
If Eastar Jet obtains separate request from the user to store the personal information for a certain period, the above period may be set differently.

With the exception of cases with special provisions in the relevant laws and regulations, the applicable personal information shall not be used and provided.

In the event that the service of Eastar Jet is intended to be used continuously until it is converted into a dormant account, please log in to the web-site or mobile App of Eastar Jet.

8. Rights and duties of users and legal representatives and methods to exercise
A. User and legal representatives with authority are entitled to browse and modify a member's personal information on "MYPAGE" of the website of Eastar Jet. When requests are made through e-mail or in writing to staff members in charge of managing personal information, the Company browses, modifies or deletes the information. ID, name and date of birth cannot be modified, but it can be exceptionally approved to change a name due to a changed name. Cases where deletion or modification is prohibited or limited in accordance with other legislations can be limited for processing. Further, when requests are made to modify errors in personal information, such personal information is not used or provided until the modification is completed unless provision of personal information is requested by other legislations. If incorrect personal information is already provided, result of modification is notified to a third party for modification.

B. Users and legal representatives are entitled to request the suspension of processing personal information on the website of Eastar Jet whenever they want. However, requests for suspension can be rejected in the following cases:
1) When it is inevitable to reject requests due to special legal regulations or compliance with legal duties

2) When it is possible to damage the life and body of others or infringe on property and interests of others unfairly

3) When information holders do not express their willingness to cancel the contract in cases where implementation of the contract cannot be conducted such as when agreed services with information holders cannot be provided unless personal information is processed

C. Members can withdraw agreed contents for collection, use and provision of personal information with membership whenever they want. As for withdrawal of consent, the Company takes necessary measures such as deletion of personal information without delay when users click "Withdrawal of membership" on the Company's website or contact staff members in charge of managing personal information in writing, on the phone or by e-mail. However, when the Company needs to preserve personal information of members in accordance with regulations of terms and conditions, processing of personal information can be limited. In such cases, members should notify their IDs and identification information to identify personal information, and some services are restricted or blocked due to withdrawal.

9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to protect personal information of children below the age of 14, and the Company does not collect children's personal information.

10. Installation, operation and rejection of devices to automatically collect personal information

The Company can install and operate cookies, which store and find customer information through provided Internet services. A cookie is character string information which is stored by a web server on a web browser and is sent for additional requests by the server. When customers access the website of Eastar Jet, the Company can provide customers with services without inputting additional information such as names by reading the contents of the cookie and finding additional information.

A. Customer information which is collected through cookies can be used for the following purposes:
1) Providing differentiated information depending on each sector of personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours for stay by members and non-members and identifying users' tastes and interests;
3) Providing personal customized services for the next time of access by tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer habits

B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option > Personal information > Advanced" at the upper part of web browser, give notification in installing cookies or reject all cookies. However, when customers reject installation of cookies, inconvenience or difficulties may be caused in using or providing services.

C. Cookies are terminated when the browser is closed or users are logged out.

11. Measures for technical and managerial protection of personal information
Eastar Jet handles the Users' privacy with technological and systematic approaches to prevent loss, theft, leakages, alteration, and compromise and to secure stability of the information as follows:

A. Encryption of personal information

User passwords are stored and managed by being encrypted in one way, and identification and change of personal information can be carried out only by a member who knows the passwords.

B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or compromised by hacking or computer viruses. The information is regularly backed up for data integrity and protected with the most up-to-date vaccine programs. All personal information is safely encrypted and transferred on the network.

Further, the company controls external access without permission by using a system for blocking infringement and strives to use every possible technical device to ensure security in other systems.

C. Minimization of employees in charge of processing personal information and education for the employees

The Company limits the number of employees in charge of managing personal information to a minimum and makes them recognize the importance of personal information protection through managerial measures such as education for staff members handling personal information.

D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected by checking whether measures for protecting personal information are implemented and staff members comply with regulations through the in-company organization for protection of personal information.

12. Staff in charge of managing personal information and contact numbers
Eastar Jet has designated relevant departments and staff members in charge of managing personal information to protect customer information and deal with complaints over the management of personal information.

Inquiry for personal information: Reservation Center 1544 - 0080

Staff in charge of managing personal information:

Name: JongGu Choi
Email: [email protected]

Department in charge of managing personal information: Information Strategy Department
Email: [email protected]

For other reports or counseling on the breach of privacy, please contact the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118 (http://privacy.kisa.or.kr)

- Personal Information Dispute Mediation Committee 1833-6972 (http://www.kopico.go.kr)

- Supreme Prosecutors' Office Cybercrime Investigation Department (without area code)1301 (http://spo.go.kr)

- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 ( http://cyber.go.kr )

13. Implementation of Personal Information Handling Policy and revised contents (Duty of notification)

Eastar Jet complies with all applicable laws and regulations including Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., Personal Information Protection Regulations, Use and Protection of Credit Information Act, Framework Act on Electronic Commerce, Guidelines for Consumer Protection in the Context of Electronic Commerce, etc. In consequence, Eastar Jet's Personal Information Handling Policy is subject to change at any time in accordance with applicable laws.

In case of the revision of the Personal Information Handling Policy, the company shall announce the date, reasons and contents of the revision on the website.

◈ Eastar Jet's revised Personal Information Handling Policy has been effective since January 20, 2020.

Revision of Personal Information Handling Policy

- Personal Information Handling Policy Version : V2.8

- Date of revision for Personal Information Handling Policy : January 20, 2020

- Reasons of the revision for Personal Information Handling Policy : Change terminology and update personal information collection items

Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar Jet") considers the protection of users' personal information important and complies with regulations for the protection of personal information in relevant legislations such as "Personal Information Protection Act" and "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc."

The Company informs how and for which purposes the Company uses personal information offered by users and measures the Company takes to protect personal information by notifying the following personal information handling policy. The Company's Personal Information Handling Policy may change depending on changes in legislation and announcement or the Company's terms and conditions and internal policy; in cases of revision, the Company notifies changes to users or posts changes on the service screen.

Users are entitled to withhold consent for the collection, use, provision and consignment of the following personal information. However, when users withhold consent, whole or partial services cannot be used.

1. Purposes of personal information collection and use

Eastar Jet shall not use the personal information of the subject beyond the scope this article describes except for cases the subject of personal information agreed to or is defined by relevant laws.

A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline tickets, delivery of various products such as airline tickets and souvenirs and events, granting and reviewing qualification as best members, providing customized services, verification of bank transactions and banking services, purchase and collection of fees

B. Membership administration

Member verification regarding the membership service details, individual identification, protection from misuse by delinquent members and protection from unauthorized use, confirmation for the voluntary sign-up, limitation of sign-up and number of sign-ups, record preservation for resolution of the future dispute, complaints and requested issue handling, delivering of notifications

C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized services, service offering and advertisements according to the attributes of demographic research, provision of information on products by the company and affiliates, identification of access frequency, statistics regarding the use of service by members, and delivering advertising information and providing participation opportunity in the events. (User personal information is not provided to individuals or groups which request advertising.) Separate consent is required for use of personal information for marketing and advertising purposes. Even when the user refuses to give such consent, there will be no restrictions in the use of services.

D. Inquiries related promotion affiliation
Collection of information related to promotion and other marketing activities

2. Collected personal information

Eastar Jet collects the minimum personal information necessary to provide services.

A. Membership on the website ( www.eastarjet.com)

※ In the case of a subscription to preferred membership, "company name" will also be collected.

B. Ticket reservation and payment by members and non-members

C. Other services

D. The following information can be created and collected in the process of using services or business

- Records of using services, Access log, Access IP, Payment records

E. In applying for an event

- ID, Name, Address, Gender, Date of Birth, Contact number (Mobile phone number or -email)

※ The personal information subject to collection may vary depending on the purpose and requirement of each event.

3. Consent to Transfer of Personal Information to a Third Party

Eastar Jet uses a user's personal information to the extent notified in "Collection and Use of Personal Information." The Company does not use the information beyond that extent nor provide a third party with personal information without prior consent from the user. Exceptions to this are made in exceptional circumstances, such as where the user has given prior consent to the disclosure or provision of his or her personal information to a third party. Easter Jet is also obligated to provide a user's personal information in accordance with the law, or where a request has been made by crime investigation agencies or supervisory authorities pursuant to the procedure and methods of applicable laws for the purpose of crime investigation or inspection. These cases, however, are exceptions.

4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the implementation of contracts and provision of services to external companies as follows:

▼ Status of associated companies(Ground Handling Company)

5. Overseas Transfer of Personal Information

Eastar Jet will transfer personal information overseas as follows to operate its reservation and transportation system. A user has the right to refuse to consent to such overseas transfer of personal information. If a user refuses to consent to overseas transfer of personal information, however, then the purpose of such overseas transfer cannot be achieved. Thus, there may be difficulties in the use of services.

6. Period for possession and use of person information

Eastar Jet possesses and uses customers' personal information for the period of providing services. When a user withdraws membership, the collected personal information is immediately destroyed to prevent its use or browsing of the information. However, when it is necessary to preserve the information in accordance with applicable laws, the information is preserved in accordance with such laws.

7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is as follows:
A. Destruction process

- Any personal information entered by a user for purposes such as membership subscription, after achievement of the purpose, will be destroyed for reasons of information protection. This is done as prescribed in Eastar Jet's internal policies and relevant laws.

- The aforementioned personal information, unless pursuant to relevant laws, will not be used for any purpose other than that of possessing the information.

B. Destruction method

- The personal information stored in the form of electronic file will be deleted using a technique which makes it impossible for the deleted information to be retrieved. The personal information printed on paper will be destroyed by shredding or incineration.

C. Introduction of the personal information usage period system

- To protect the personal information of any person not using the service for a long period (1 year or longer), Eastar Jet shall classify those non-users as a dormant account from June 5, 2019, in a way to safely separate and retain the personal information.

Based on the final log-in date, the period of non-use (1 year) is calculated to separately keep the personal information of the non-users and the relevant contents shall be notified to the applicable user through e-mail and others at least one month in advance.
If Eastar Jet obtains separate request from the user to store the personal information for a certain period, the above period may be set differently.

With the exception of cases with special provisions in the relevant laws and regulations, the applicable personal information shall not be used and provided.

In the event that the service of Eastar Jet is intended to be used continuously until it is converted into a dormant account, please log in to the web-site or mobile App of Eastar Jet.

8. Rights and duties of users and legal representatives and methods to exercise
A. User and legal representatives with authority are entitled to browse and modify a member's personal information on "MYPAGE" of the website of Eastar Jet. When requests are made through e-mail or in writing to staff members in charge of managing personal information, the Company browses, modifies or deletes the information. ID, name and date of birth cannot be modified, but it can be exceptionally approved to change a name due to a changed name. Cases where deletion or modification is prohibited or limited in accordance with other legislations can be limited for processing. Further, when requests are made to modify errors in personal information, such personal information is not used or provided until the modification is completed unless provision of personal information is requested by other legislations. If incorrect personal information is already provided, result of modification is notified to a third party for modification.

B. Users and legal representatives are entitled to request the suspension of processing personal information on the website of Eastar Jet whenever they want. However, requests for suspension can be rejected in the following cases:
1) When it is inevitable to reject requests due to special legal regulations or compliance with legal duties

2) When it is possible to damage the life and body of others or infringe on property and interests of others unfairly

3) When information holders do not express their willingness to cancel the contract in cases where implementation of the contract cannot be conducted such as when agreed services with information holders cannot be provided unless personal information is processed

C. Members can withdraw agreed contents for collection, use and provision of personal information with membership whenever they want. As for withdrawal of consent, the Company takes necessary measures such as deletion of personal information without delay when users click "Withdrawal of membership" on the Company's website or contact staff members in charge of managing personal information in writing, on the phone or by e-mail. However, when the Company needs to preserve personal information of members in accordance with regulations of terms and conditions, processing of personal information can be limited. In such cases, members should notify their IDs and identification information to identify personal information, and some services are restricted or blocked due to withdrawal.

9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to protect personal information of children below the age of 14, and the Company does not collect children's personal information.

10. Installation, operation and rejection of devices to automatically collect personal information

The Company can install and operate cookies, which store and find customer information through provided Internet services. A cookie is character string information which is stored by a web server on a web browser and is sent for additional requests by the server. When customers access the website of Eastar Jet, the Company can provide customers with services without inputting additional information such as names by reading the contents of the cookie and finding additional information.

A. Customer information which is collected through cookies can be used for the following purposes:
1) Providing differentiated information depending on each sector of personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours for stay by members and non-members and identifying users' tastes and interests;
3) Providing personal customized services for the next time of access by tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer habits

B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option > Personal information > Advanced" at the upper part of web browser, give notification in installing cookies or reject all cookies. However, when customers reject installation of cookies, inconvenience or difficulties may be caused in using or providing services.

C. Cookies are terminated when the browser is closed or users are logged out.

11. Measures for technical and managerial protection of personal information
Eastar Jet handles the Users' privacy with technological and systematic approaches to prevent loss, theft, leakages, alteration, and compromise and to secure stability of the information as follows:

A. Encryption of personal information

User passwords are stored and managed by being encrypted in one way, and identification and change of personal information can be carried out only by a member who knows the passwords.

B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or compromised by hacking or computer viruses. The information is regularly backed up for data integrity and protected with the most up-to-date vaccine programs. All personal information is safely encrypted and transferred on the network.

Further, the company controls external access without permission by using a system for blocking infringement and strives to use every possible technical device to ensure security in other systems.

C. Minimization of employees in charge of processing personal information and education for the employees

The Company limits the number of employees in charge of managing personal information to a minimum and makes them recognize the importance of personal information protection through managerial measures such as education for staff members handling personal information.

D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected by checking whether measures for protecting personal information are implemented and staff members comply with regulations through the in-company organization for protection of personal information.

12. Staff in charge of managing personal information and contact numbers
Eastar Jet has designated relevant departments and staff members in charge of managing personal information to protect customer information and deal with complaints over the management of personal information.

Inquiry for personal information: Reservation Center 1544 - 0080

Staff in charge of managing personal information:

Name: Sanguk Kim
Email: [email protected]

Department in charge of managing personal information: Information Strategy Department
Email: [email protected]

For other reports or counseling on the breach of privacy, please contact the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118 (http://privacy.kisa.or.kr)

- Personal Information Dispute Mediation Committee 1833-6972 (http://www.kopico.go.kr)

- Supreme Prosecutors' Office Cybercrime Investigation Department (without area code)1301 (http://spo.go.kr)

- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 ( http://cyber.go.kr )

13. Implementation of Personal Information Handling Policy and revised contents (Duty of notification)

Eastar Jet complies with all applicable laws and regulations including Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., Personal Information Protection Regulations, Use and Protection of Credit Information Act, Framework Act on Electronic Commerce, Guidelines for Consumer Protection in the Context of Electronic Commerce, etc. In consequence, Eastar Jet's Personal Information Handling Policy is subject to change at any time in accordance with applicable laws.

In case of the revision of the Personal Information Handling Policy, the company shall announce the date, reasons and contents of the revision on the website.

◈ Eastar Jet's revised Personal Information Handling Policy has been effective since August 1, 2019.

Revision of Personal Information Handling Policy

- Personal Information Handling Policy Version : V2.7

- Date of revision for Personal Information Handling Policy : August 1, 2019

- Reasons of the revision for Personal Information Handling Policy : Change of personal information effective period system policy

Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar Jet") considers the protection of users' personal information important and complies with regulations for the protection of personal information in relevant legislations such as "Personal Information Protection Act" and "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc."

The Company informs how and for which purposes the Company uses personal information offered by users and measures the Company takes to protect personal information by notifying the following personal information handling policy. The Company's Personal Information Handling Policy may change depending on changes in legislation and announcement or the Company's terms and conditions and internal policy; in cases of revision, the Company notifies changes to users or posts changes on the service screen.

Users are entitled to withhold consent for the collection, use, provision and consignment of the following personal information. However, when users withhold consent, whole or partial services cannot be used.

1. Purposes of personal information collection and use

Eastar Jet shall not use the personal information of the subject beyond the scope this article describes except for cases the subject of personal information agreed to or is defined by relevant laws.

A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline tickets, delivery of various products such as airline tickets and souvenirs and events, granting and reviewing qualification as best members, providing customized services, verification of bank transactions and banking services, purchase and collection of fees

B. Membership administration

Member verification regarding the membership service details, individual identification, protection from misuse by delinquent members and protection from unauthorized use, confirmation for the voluntary sign-up, limitation of sign-up and number of sign-ups, record preservation for resolution of the future dispute, complaints and requested issue handling, delivering of notifications

C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized services, service offering and advertisements according to the attributes of demographic research, provision of information on products by the company and affiliates, identification of access frequency, statistics regarding the use of service by members, and delivering advertising information and providing participation opportunity in the events. (User personal information is not provided to individuals or groups which request advertising.) Separate consent is required for use of personal information for marketing and advertising purposes. Even when the user refuses to give such consent, there will be no restrictions in the use of services.

D. Inquiries related promotion affiliation
Collection of information related to promotion and other marketing activities

2. Collected personal information

Eastar Jet collects the minimum personal information necessary to provide services.

A. Membership on the website ( www.eastarjet.com)

※ In the case of a subscription to preferred membership, "company name" will also be collected.

B. Ticket reservation and payment by members and non-members

C. Other services

D. The following information can be created and collected in the process of using services or business

- Records of using services, Access log, Access IP, Payment records

E. In applying for an event

- ID, Name, Address, Gender, Date of Birth, Contact number (Mobile phone number or -email)

※ The personal information subject to collection may vary depending on the purpose and requirement of each event.

3. Consent to Transfer of Personal Information to a Third Party

Eastar Jet uses a user's personal information to the extent notified in "Collection and Use of Personal Information." The Company does not use the information beyond that extent nor provide a third party with personal information without prior consent from the user. Exceptions to this are made in exceptional circumstances, such as where the user has given prior consent to the disclosure or provision of his or her personal information to a third party. Easter Jet is also obligated to provide a user's personal information in accordance with the law, or where a request has been made by crime investigation agencies or supervisory authorities pursuant to the procedure and methods of applicable laws for the purpose of crime investigation or inspection. These cases, however, are exceptions.

4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the implementation of contracts and provision of services to external companies as follows:

▼ Status of associated companies(Ground Handling Company)

5. Overseas Transfer of Personal Information

Eastar Jet will transfer personal information overseas as follows to operate its reservation and transportation system. A user has the right to refuse to consent to such overseas transfer of personal information. If a user refuses to consent to overseas transfer of personal information, however, then the purpose of such overseas transfer cannot be achieved. Thus, there may be difficulties in the use of services.

6. Period for possession and use of person information

Eastar Jet possesses and uses customers' personal information for the period of providing services. When a user withdraws membership, the collected personal information is immediately destroyed to prevent its use or browsing of the information. However, when it is necessary to preserve the information in accordance with applicable laws, the information is preserved in accordance with such laws.

7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is as follows:
A. Destruction process

- Any personal information entered by a user for purposes such as membership subscription, after achievement of the purpose, will be destroyed for reasons of information protection. This is done as prescribed in Eastar Jet's internal policies and relevant laws.

- The aforementioned personal information, unless pursuant to relevant laws, will not be used for any purpose other than that of possessing the information.

B. Destruction method

- The personal information stored in the form of electronic file will be deleted using a technique which makes it impossible for the deleted information to be retrieved. The personal information printed on paper will be destroyed by shredding or incineration.

C. Introduction of the personal information usage period system

- To protect the personal information of any person not using the service for a long period (1 year or longer), Eastar Jet shall classify those non-users as a dormant account from June 5, 2019, in a way to safely separate and retain the personal information.

Based on the final log-in date, the period of non-use (1 year) is calculated to separately keep the personal information of the non-users and the relevant contents shall be notified to the applicable user through e-mail and others at least one month in advance.

With the exception of cases with special provisions in the relevant laws and regulations, the applicable personal information shall not be used and provided.

In the event that the service of Eastar Jet is intended to be used continuously until it is converted into a dormant account, please log in to the web-site or mobile App of Eastar Jet.

8. Rights and duties of users and legal representatives and methods to exercise
A. User and legal representatives with authority are entitled to browse and modify a member's personal information on "MYPAGE" of the website of Eastar Jet. When requests are made through e-mail or in writing to staff members in charge of managing personal information, the Company browses, modifies or deletes the information. ID, name and date of birth cannot be modified, but it can be exceptionally approved to change a name due to a changed name. Cases where deletion or modification is prohibited or limited in accordance with other legislations can be limited for processing. Further, when requests are made to modify errors in personal information, such personal information is not used or provided until the modification is completed unless provision of personal information is requested by other legislations. If incorrect personal information is already provided, result of modification is notified to a third party for modification.

B. Users and legal representatives are entitled to request the suspension of processing personal information on the website of Eastar Jet whenever they want. However, requests for suspension can be rejected in the following cases:
1) When it is inevitable to reject requests due to special legal regulations or compliance with legal duties

2) When it is possible to damage the life and body of others or infringe on property and interests of others unfairly

3) When information holders do not express their willingness to cancel the contract in cases where implementation of the contract cannot be conducted such as when agreed services with information holders cannot be provided unless personal information is processed

C. Members can withdraw agreed contents for collection, use and provision of personal information with membership whenever they want. As for withdrawal of consent, the Company takes necessary measures such as deletion of personal information without delay when users click "Withdrawal of membership" on the Company's website or contact staff members in charge of managing personal information in writing, on the phone or by e-mail. However, when the Company needs to preserve personal information of members in accordance with regulations of terms and conditions, processing of personal information can be limited. In such cases, members should notify their IDs and identification information to identify personal information, and some services are restricted or blocked due to withdrawal.

9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to protect personal information of children below the age of 14, and the Company does not collect children's personal information.

10. Installation, operation and rejection of devices to automatically collect personal information

The Company can install and operate cookies, which store and find customer information through provided Internet services. A cookie is character string information which is stored by a web server on a web browser and is sent for additional requests by the server. When customers access the website of Eastar Jet, the Company can provide customers with services without inputting additional information such as names by reading the contents of the cookie and finding additional information.

A. Customer information which is collected through cookies can be used for the following purposes:
1) Providing differentiated information depending on each sector of personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours for stay by members and non-members and identifying users' tastes and interests;
3) Providing personal customized services for the next time of access by tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer habits

B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option > Personal information > Advanced" at the upper part of web browser, give notification in installing cookies or reject all cookies. However, when customers reject installation of cookies, inconvenience or difficulties may be caused in using or providing services.

C. Cookies are terminated when the browser is closed or users are logged out.

11. Measures for technical and managerial protection of personal information
Eastar Jet handles the Users' privacy with technological and systematic approaches to prevent loss, theft, leakages, alteration, and compromise and to secure stability of the information as follows:

A. Encryption of personal information

User passwords are stored and managed by being encrypted in one way, and identification and change of personal information can be carried out only by a member who knows the passwords.

B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or compromised by hacking or computer viruses. The information is regularly backed up for data integrity and protected with the most up-to-date vaccine programs. All personal information is safely encrypted and transferred on the network.

Further, the company controls external access without permission by using a system for blocking infringement and strives to use every possible technical device to ensure security in other systems.

C. Minimization of employees in charge of processing personal information and education for the employees

The Company limits the number of employees in charge of managing personal information to a minimum and makes them recognize the importance of personal information protection through managerial measures such as education for staff members handling personal information.

D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected by checking whether measures for protecting personal information are implemented and staff members comply with regulations through the in-company organization for protection of personal information.

12. Staff in charge of managing personal information and contact numbers
Eastar Jet has designated relevant departments and staff members in charge of managing personal information to protect customer information and deal with complaints over the management of personal information.

Inquiry for personal information: Reservation Center 1544 - 0080

Staff in charge of managing personal information:

Name: Sanguk Kim
Email: [email protected]

Department in charge of managing personal information: Information Strategy Department
Email: [email protected]

For other reports or counseling on the breach of privacy, please contact the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118 (http://privacy.kisa.or.kr)

- Personal Information Dispute Mediation Committee 1833-6972 (http://www.kopico.go.kr)

- Supreme Prosecutors' Office Cybercrime Investigation Department (without area code)1301 (http://spo.go.kr)

- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 ( http://cyber.go.kr )

13. Implementation of Personal Information Handling Policy and revised contents (Duty of notification)

Eastar Jet complies with all applicable laws and regulations including Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., Personal Information Protection Regulations, Use and Protection of Credit Information Act, Framework Act on Electronic Commerce, Guidelines for Consumer Protection in the Context of Electronic Commerce, etc. In consequence, Eastar Jet's Personal Information Handling Policy is subject to change at any time in accordance with applicable laws.

In case of the revision of the Personal Information Handling Policy, the company shall announce the date, reasons and contents of the revision on the website.

◈ Eastar Jet's revised Personal Information Handling Policy has been effective since June 20, 2019.

Revision of Personal Information Handling Policy

- Personal Information Handling Policy Version : V2.6

- Date of revision for Personal Information Handling Policy : June 20, 2019

- Reasons of the revision for Personal Information Handling Policy : Change of personal information effective period system policy and responsible person of personal information, update on the status of company consigned to process personal information

Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar Jet") considers the protection of users' personal information important and complies with regulations for the protection of personal information in relevant legislations such as "Personal Information Protection Act" and "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc."

The Company informs how and for which purposes the Company uses personal information offered by users and measures the Company takes to protect personal information by notifying the following personal information handling policy. The Company's Personal Information Handling Policy may change depending on changes in legislation and announcement or the Company's terms and conditions and internal policy; in cases of revision, the Company notifies changes to users or posts changes on the service screen.

Users are entitled to withhold consent for the collection, use, provision and consignment of the following personal information. However, when users withhold consent, whole or partial services cannot be used.

1. Purposes of personal information collection and use

Eastar Jet shall not use the personal information of the subject beyond the scope this article describes except for cases the subject of personal information agreed to or is defined by relevant laws.

A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline tickets, delivery of various products such as airline tickets and souvenirs and events, granting and reviewing qualification as best members, providing customized services, verification of bank transactions and banking services, purchase and collection of fees

B. Membership administration

Member verification regarding the membership service details, individual identification, protection from misuse by delinquent members and protection from unauthorized use, confirmation for the voluntary sign-up, limitation of sign-up and number of sign-ups, record preservation for resolution of the future dispute, complaints and requested issue handling, delivering of notifications

C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized services, service offering and advertisements according to the attributes of demographic research, provision of information on products by the company and affiliates, identification of access frequency, statistics regarding the use of service by members, and delivering advertising information and providing participation opportunity in the events. (User personal information is not provided to individuals or groups which request advertising.) Separate consent is required for use of personal information for marketing and advertising purposes. Even when the user refuses to give such consent, there will be no restrictions in the use of services.

D. Inquiries related promotion affiliation
Collection of information related to promotion and other marketing activities

2. Collected personal information

Eastar Jet collects the minimum personal information necessary to provide services.

A. Membership on the website ( www.eastarjet.com)

※ In the case of a subscription to preferred membership, "company name" will also be collected.

B. Ticket reservation and payment by members and non-members

C. Other services

D. The following information can be created and collected in the process of using services or business

- Records of using services, Access log, Access IP, Payment records

E. In applying for an event

- ID, Name, Address, Gender, Date of Birth, Contact number (Mobile phone number or -email)

※ The personal information subject to collection may vary depending on the purpose and requirement of each event.

3. Consent to Transfer of Personal Information to a Third Party

Eastar Jet uses a user's personal information to the extent notified in "Collection and Use of Personal Information." The Company does not use the information beyond that extent nor provide a third party with personal information without prior consent from the user. Exceptions to this are made in exceptional circumstances, such as where the user has given prior consent to the disclosure or provision of his or her personal information to a third party. Easter Jet is also obligated to provide a user's personal information in accordance with the law, or where a request has been made by crime investigation agencies or supervisory authorities pursuant to the procedure and methods of applicable laws for the purpose of crime investigation or inspection. These cases, however, are exceptions.

4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the implementation of contracts and provision of services to external companies as follows:

▼ Status of associated companies(Ground Handling Company)

5. Overseas Transfer of Personal Information

Eastar Jet will transfer personal information overseas as follows to operate its reservation and transportation system. A user has the right to refuse to consent to such overseas transfer of personal information. If a user refuses to consent to overseas transfer of personal information, however, then the purpose of such overseas transfer cannot be achieved. Thus, there may be difficulties in the use of services.

6. Period for possession and use of person information

Eastar Jet possesses and uses customers' personal information for the period of providing services. When a user withdraws membership, the collected personal information is immediately destroyed to prevent its use or browsing of the information. However, when it is necessary to preserve the information in accordance with applicable laws, the information is preserved in accordance with such laws.

7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is as follows:
A. Destruction process

- Any personal information entered by a user for purposes such as membership subscription, after achievement of the purpose, will be destroyed for reasons of information protection. This is done as prescribed in Eastar Jet's internal policies and relevant laws.

- The aforementioned personal information, unless pursuant to relevant laws, will not be used for any purpose other than that of possessing the information.

B. Destruction method

- The personal information stored in the form of electronic file will be deleted using a technique which makes it impossible for the deleted information to be retrieved. The personal information printed on paper will be destroyed by shredding or incineration.

C. Introduction of the personal information usage period system

- Eastar Jet, to protect personal information of a long-term (1 year or more) non-user of service, began to periodically destroy such non-service user's personal information on August 18, 2015. The period of non-use of service will be calculated based on the date of final log-in. The necessary matters will be notified to the relevant users through emails, etc. at least 1 month before the aforementioned personal information is destroyed.

8. Rights and duties of users and legal representatives and methods to exercise
A. User and legal representatives with authority are entitled to browse and modify a member's personal information on "MYPAGE" of the website of Eastar Jet. When requests are made through e-mail or in writing to staff members in charge of managing personal information, the Company browses, modifies or deletes the information. ID, name and date of birth cannot be modified, but it can be exceptionally approved to change a name due to a changed name. Cases where deletion or modification is prohibited or limited in accordance with other legislations can be limited for processing. Further, when requests are made to modify errors in personal information, such personal information is not used or provided until the modification is completed unless provision of personal information is requested by other legislations. If incorrect personal information is already provided, result of modification is notified to a third party for modification.

B. Users and legal representatives are entitled to request the suspension of processing personal information on the website of Eastar Jet whenever they want. However, requests for suspension can be rejected in the following cases:
1) When it is inevitable to reject requests due to special legal regulations or compliance with legal duties

2) When it is possible to damage the life and body of others or infringe on property and interests of others unfairly

3) When information holders do not express their willingness to cancel the contract in cases where implementation of the contract cannot be conducted such as when agreed services with information holders cannot be provided unless personal information is processed

C. Members can withdraw agreed contents for collection, use and provision of personal information with membership whenever they want. As for withdrawal of consent, the Company takes necessary measures such as deletion of personal information without delay when users click "Withdrawal of membership" on the Company's website or contact staff members in charge of managing personal information in writing, on the phone or by e-mail. However, when the Company needs to preserve personal information of members in accordance with regulations of terms and conditions, processing of personal information can be limited. In such cases, members should notify their IDs and identification information to identify personal information, and some services are restricted or blocked due to withdrawal.

9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to protect personal information of children below the age of 14, and the Company does not collect children's personal information.

10. Installation, operation and rejection of devices to automatically collect personal information

The Company can install and operate cookies, which store and find customer information through provided Internet services. A cookie is character string information which is stored by a web server on a web browser and is sent for additional requests by the server. When customers access the website of Eastar Jet, the Company can provide customers with services without inputting additional information such as names by reading the contents of the cookie and finding additional information.

A. Customer information which is collected through cookies can be used for the following purposes:
1) Providing differentiated information depending on each sector of personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours for stay by members and non-members and identifying users' tastes and interests;
3) Providing personal customized services for the next time of access by tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer habits

B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option > Personal information > Advanced" at the upper part of web browser, give notification in installing cookies or reject all cookies. However, when customers reject installation of cookies, inconvenience or difficulties may be caused in using or providing services.

C. Cookies are terminated when the browser is closed or users are logged out.

11. Measures for technical and managerial protection of personal information
Eastar Jet handles the Users' privacy with technological and systematic approaches to prevent loss, theft, leakages, alteration, and compromise and to secure stability of the information as follows:

A. Encryption of personal information

User passwords are stored and managed by being encrypted in one way, and identification and change of personal information can be carried out only by a member who knows the passwords.

B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or compromised by hacking or computer viruses. The information is regularly backed up for data integrity and protected with the most up-to-date vaccine programs. All personal information is safely encrypted and transferred on the network.

Further, the company controls external access without permission by using a system for blocking infringement and strives to use every possible technical device to ensure security in other systems.

C. Minimization of employees in charge of processing personal information and education for the employees

The Company limits the number of employees in charge of managing personal information to a minimum and makes them recognize the importance of personal information protection through managerial measures such as education for staff members handling personal information.

D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected by checking whether measures for protecting personal information are implemented and staff members comply with regulations through the in-company organization for protection of personal information.

12. Staff in charge of managing personal information and contact numbers
Eastar Jet has designated relevant departments and staff members in charge of managing personal information to protect customer information and deal with complaints over the management of personal information.

Inquiry for personal information: Reservation Center 1544 - 0080

Staff in charge of managing personal information:

Name: Sooji Lee
Email: [email protected]

Department in charge of managing personal information: Information Technology Team
Email: [email protected]

For other reports or counseling on the breach of privacy, please contact the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118 (http://privacy.kisa.or.kr)

- Personal Information Dispute Mediation Committee 1833-6972 (http://www.kopico.go.kr)

- Supreme Prosecutors' Office Cybercrime Investigation Department (without area code)1301 (http://spo.go.kr)

- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 ( http://cyberbureau.police.go.kr )

13. Implementation of Personal Information Handling Policy and revised contents (Duty of notification)

Eastar Jet complies with all applicable laws and regulations including Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., Personal Information Protection Regulations, Use and Protection of Credit Information Act, Framework Act on Electronic Commerce, Guidelines for Consumer Protection in the Context of Electronic Commerce, etc. In consequence, Eastar Jet's Personal Information Handling Policy is subject to change at any time in accordance with applicable laws.

In case of the revision of the Personal Information Handling Policy, the company shall announce the date, reasons and contents of the revision on the website.

◈ Eastar Jet's revised Personal Information Handling Policy has been effective since January 14, 2019.

Revision of Personal Information Handling Policy

- Personal Information Handling Policy Version : V2.5

- Date of revision for Personal Information Handling Policy : January 14, 2019

- Reasons of the revision for Personal Information Handling Policy : Update of information about contractors/relatedorganizations and personal information items for collection

Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar Jet") considers the protection of users' personal information important and complies with regulations for the protection of personal information in relevant legislations such as "Personal Information Protection Act" and "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc."

The Company informs how and for which purposes the Company uses personal information offered by users and measures the Company takes to protect personal information by notifying the following personal information handling policy. The Company's Personal Information Handling Policy may change depending on changes in legislation and announcement or the Company's terms and conditions and internal policy; in cases of revision, the Company notifies changes to users or posts changes on the service screen.

Users are entitled to withhold consent for the collection, use, provision and consignment of the following personal information. However, when users withhold consent, whole or partial services cannot be used.

1. Purposes of personal information collection and use

Eastar Jet shall not use the personal information of the subject beyond the scope this article describes except for cases the subject of personal information agreed to or is defined by relevant laws.

A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline tickets, delivery of various products such as airline tickets and souvenirs and events, granting and reviewing qualification as best members, providing customized services, verification of bank transactions and banking services, purchase and collection of fees

B. Membership administration

Member verification regarding the membership service details, individual identification, protection from misuse by delinquent members and protection from unauthorized use, confirmation for the voluntary sign-up, limitation of sign-up and number of sign-ups, record preservation for resolution of the future dispute, complaints and requested issue handling, delivering of notifications

C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized services, service offering and advertisements according to the attributes of demographic research, provision of information on products by the company and affiliates, identification of access frequency, statistics regarding the use of service by members, and delivering advertising information and providing participation opportunity in the events. (User personal information is not provided to individuals or groups which request advertising.) Separate consent is required for use of personal information for marketing and advertising purposes. Even when the user refuses to give such consent, there will be no restrictions in the use of services.

D. Inquiries related promotion affiliation
Collection of information related to promotion and other marketing activities

2. Collected personal information

Eastar Jet collects the minimum personal information necessary to provide services.

A. Membership on the website ( www.eastarjet.com)

※ In the case of a subscription to preferred membership, "company name" will also be collected.

B. Ticket reservation and payment by members and non-members

C. Other services

D. The following information can be created and collected in the process of using services or business

- Records of using services, Access log, Access IP, Payment records

E. In applying for an event

- ID, Name, Address, Gender, Date of Birth, Contact number (Mobile phone number or -email)

※ The personal information subject to collection may vary depending on the purpose and requirement of each event.

3. Consent to Transfer of Personal Information to a Third Party

Eastar Jet uses a user's personal information to the extent notified in "Collection and Use of Personal Information." The Company does not use the information beyond that extent nor provide a third party with personal information without prior consent from the user. Exceptions to this are made in exceptional circumstances, such as where the user has given prior consent to the disclosure or provision of his or her personal information to a third party. Easter Jet is also obligated to provide a user's personal information in accordance with the law, or where a request has been made by crime investigation agencies or supervisory authorities pursuant to the procedure and methods of applicable laws for the purpose of crime investigation or inspection. These cases, however, are exceptions.

4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the implementation of contracts and provision of services to external companies as follows:

▼ Status of associated companies(Ground Handling Company)

5. Overseas Transfer of Personal Information

Eastar Jet will transfer personal information overseas as follows to operate its reservation and transportation system. A user has the right to refuse to consent to such overseas transfer of personal information. If a user refuses to consent to overseas transfer of personal information, however, then the purpose of such overseas transfer cannot be achieved. Thus, there may be difficulties in the use of services.

6. Period for possession and use of person information

Eastar Jet possesses and uses customers' personal information for the period of providing services. When a user withdraws membership, the collected personal information is immediately destroyed to prevent its use or browsing of the information. However, when it is necessary to preserve the information in accordance with applicable laws, the information is preserved in accordance with such laws.

7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is as follows:
A. Destruction process

- Any personal information entered by a user for purposes such as membership subscription, after achievement of the purpose, will be destroyed for reasons of information protection. This is done as prescribed in Eastar Jet's internal policies and relevant laws.

- The aforementioned personal information, unless pursuant to relevant laws, will not be used for any purpose other than that of possessing the information.

B. Destruction method

- The personal information stored in the form of electronic file will be deleted using a technique which makes it impossible for the deleted information to be retrieved. The personal information printed on paper will be destroyed by shredding or incineration.

C. Introduction of the personal information usage period system

- Eastar Jet, to protect personal information of a long-term (1 year or more) non-user of service, began to periodically destroy such non-service user's personal information on August 18, 2015. The period of non-use of service will be calculated based on the date of final log-in. The necessary matters will be notified to the relevant users through emails, etc. at least 1 month before the aforementioned personal information is destroyed.

8. Rights and duties of users and legal representatives and methods to exercise
A. User and legal representatives with authority are entitled to browse and modify a member's personal information on "MYPAGE" of the website of Eastar Jet. When requests are made through e-mail or in writing to staff members in charge of managing personal information, the Company browses, modifies or deletes the information. ID, name and date of birth cannot be modified, but it can be exceptionally approved to change a name due to a changed name. Cases where deletion or modification is prohibited or limited in accordance with other legislations can be limited for processing. Further, when requests are made to modify errors in personal information, such personal information is not used or provided until the modification is completed unless provision of personal information is requested by other legislations. If incorrect personal information is already provided, result of modification is notified to a third party for modification.

B. Users and legal representatives are entitled to request the suspension of processing personal information on the website of Eastar Jet whenever they want. However, requests for suspension can be rejected in the following cases:
1) When it is inevitable to reject requests due to special legal regulations or compliance with legal duties

2) When it is possible to damage the life and body of others or infringe on property and interests of others unfairly

3) When information holders do not express their willingness to cancel the contract in cases where implementation of the contract cannot be conducted such as when agreed services with information holders cannot be provided unless personal information is processed

C. Members can withdraw agreed contents for collection, use and provision of personal information with membership whenever they want. As for withdrawal of consent, the Company takes necessary measures such as deletion of personal information without delay when users click "Withdrawal of membership" on the Company's website or contact staff members in charge of managing personal information in writing, on the phone or by e-mail. However, when the Company needs to preserve personal information of members in accordance with regulations of terms and conditions, processing of personal information can be limited. In such cases, members should notify their IDs and identification information to identify personal information, and some services are restricted or blocked due to withdrawal.

9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to protect personal information of children below the age of 14, and the Company does not collect children's personal information.

10. Installation, operation and rejection of devices to automatically collect personal information

The Company can install and operate cookies, which store and find customer information through provided Internet services. A cookie is character string information which is stored by a web server on a web browser and is sent for additional requests by the server. When customers access the website of Eastar Jet, the Company can provide customers with services without inputting additional information such as names by reading the contents of the cookie and finding additional information.

A. Customer information which is collected through cookies can be used for the following purposes:
1) Providing differentiated information depending on each sector of personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours for stay by members and non-members and identifying users' tastes and interests;
3) Providing personal customized services for the next time of access by tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer habits

B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option > Personal information > Advanced" at the upper part of web browser, give notification in installing cookies or reject all cookies. However, when customers reject installation of cookies, inconvenience or difficulties may be caused in using or providing services.

C. Cookies are terminated when the browser is closed or users are logged out.

11. Measures for technical and managerial protection of personal information
Eastar Jet handles the Users' privacy with technological and systematic approaches to prevent loss, theft, leakages, alteration, and compromise and to secure stability of the information as follows:

A. Encryption of personal information

User passwords are stored and managed by being encrypted in one way, and identification and change of personal information can be carried out only by a member who knows the passwords.

B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or compromised by hacking or computer viruses. The information is regularly backed up for data integrity and protected with the most up-to-date vaccine programs. All personal information is safely encrypted and transferred on the network.

Further, the company controls external access without permission by using a system for blocking infringement and strives to use every possible technical device to ensure security in other systems.

C. Minimization of employees in charge of processing personal information and education for the employees

The Company limits the number of employees in charge of managing personal information to a minimum and makes them recognize the importance of personal information protection through managerial measures such as education for staff members handling personal information.

D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected by checking whether measures for protecting personal information are implemented and staff members comply with regulations through the in-company organization for protection of personal information.

12. Staff in charge of managing personal information and contact numbers
Eastar Jet has designated relevant departments and staff members in charge of managing personal information to protect customer information and deal with complaints over the management of personal information.

Inquiry for personal information: Reservation Center 1544 - 0080

Staff in charge of managing personal information:

Name: Park Jong-tae, Team Leader of Information Technology Team
Email: [email protected]

Department in charge of managing personal information: Information Technology Team
Email: [email protected]

For other reports or counseling on the breach of privacy, please contact the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118 (http://privacy.kisa.or.kr)

- Personal Information Dispute Mediation Committee 1833-6972 (http://www.kopico.go.kr)

- Supreme Prosecutors' Office Cybercrime Investigation Department +82-2-3480-2000 (http://spo.go.kr)

- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 ( http://cyber.go.kr )

13. Implementation of Personal Information Handling Policy and revised contents (Duty of notification)

Eastar Jet complies with all applicable laws and regulations including Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., Personal Information Protection Regulations, Use and Protection of Credit Information Act, Framework Act on Electronic Commerce, Guidelines for Consumer Protection in the Context of Electronic Commerce, etc. In consequence, Eastar Jet's Personal Information Handling Policy is subject to change at any time in accordance with applicable laws.

In case of the revision of the Personal Information Handling Policy, the company shall announce the date, reasons and contents of the revision on the website.

◈ Eastar Jet's revised Personal Information Handling Policy has been effective since February 12, 2018.

Revision of Personal Information Handling Policy

- Personal Information Handling Policy Version : V2.4

- Date of revision for Personal Information Handling Policy : February 12, 2018

- Reasons of the revision for Personal Information Handling Policy : Updating Personal Information Handling

Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar Jet") considers the protection of users' personal information important and complies with regulations for the protection of personal information in relevant legislations such as "Personal Information Protection Act" and "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc."

The Company informs how and for which purposes the Company uses personal information offered by users and measures the Company takes to protect personal information by notifying the following personal information handling policy. The Company's Personal Information Handling Policy may change depending on changes in legislation and announcement or the Company's terms and conditions and internal policy; in cases of revision, the Company notifies changes to users or posts changes on the service screen.

Users are entitled to withhold consent for the collection, use, provision and consignment of the following personal information. However, when users withhold consent, whole or partial services cannot be used.

1. Purposes of personal information collection and use

Eastar Jet shall not use the personal information of the subject beyond the scope this article describes except for cases the subject of personal information agreed to or is defined by relevant laws.

A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline tickets, delivery of various products such as airline tickets and souvenirs and events, granting and reviewing qualification as best members, providing customized services, verification of bank transactions and banking services, purchase and collection of fees

B. Membership administration

Member verification regarding the membership service details, individual identification, protection from misuse by delinquent members and protection from unauthorized use, confirmation for the voluntary sign-up, limitation of sign-up and number of sign-ups, record preservation for resolution of the future dispute, complaints and requested issue handling, delivering of notifications

C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized services, service offering and advertisements according to the attributes of demographic research, provision of information on products by the company and affiliates, identification of access frequency, statistics regarding the use of service by members, and delivering advertising information and providing participation opportunity in the events. (User personal information is not provided to individuals or groups which request advertising.) Separate consent is required for use of personal information for marketing and advertising purposes. Even when the user refuses to give such consent, there will be no restrictions in the use of services.

2. Collected personal information

Eastar Jet collects the minimum personal information necessary to provide services.

A. Membership on the website ( www.eastarjet.com)

※ In the case of a subscription to preferred membership, "company name" will also be collected.

B. In using services

C. The following information can be created and collected in the process of using services or business

- Records of using services, Access log, Access IP, Payment records

D. In applying for an event

- ID, Name, Address, Sex, Date of Birth, Contact number (Mobile phone number or -email)

3. Consent to Transfer of Personal Information to a Third Party

Eastar Jet uses a user's personal information to the extent notified in "Collection and Use of Personal Information." The Company does not use the information beyond that extent nor provide a third party with personal information without prior consent from the user. Exceptions to this are made in exceptional circumstances, such as where the user has given prior consent to the disclosure or provision of his or her personal information to a third party. Easter Jet is also obligated to provide a user's personal information in accordance with the law, or where a request has been made by crime investigation agencies or supervisory authorities pursuant to the procedure and methods of applicable laws for the purpose of crime investigation or inspection. These cases, however, are exceptions.

4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the implementation of contracts and provision of services to external companies as follows:

▼ Status of associated companies(Ground Handling Company)

5. Overseas Transfer of Personal Information

Eastar Jet will transfer personal information overseas as follows to operate its reservation and transportation system. A user has the right to refuse to consent to such overseas transfer of personal information. If a user refuses to consent to overseas transfer of personal information, however, then the purpose of such overseas transfer cannot be achieved. Thus, there may be difficulties in the use of services.

A. NAVITAIRE LLC An Amadeus company (Australia)

1) Purpose of Use

- Operate Eastar Jet's reservation system and keep reservation records

2) Transfer Date and Transfer Method

- In the case of membership subscription, transmit via a public network (subjected to security protocol)

3) Types of overseas transfer

- Contracting (or outsourcing) of personal information processing and preservation of personal information

4) Items of Personal Information to be Transferred

- Eastarjet Membership Number, ID, Password, DI(Duplication Information), Contact number(Mobile phone number, e-mail), Name, Sex, Date of birth, Information on card(Card Number, Card expiration date), Bank account number, transaction authentication number, transaction number, Passport Information(Nationality, Passport number, passport expiration date, nation of passport issuance), whether or not to receive information on events

5) Staff in charge of managing information

- e-mail: [email protected]

6) Period of Retention and Use by Recipient

- Until the purposes of using the personal information are attained

B. Amazon Web Services, Inc. (Japan)

1) Purpose of Use

- Provide the Global Cloud service to operate Eastar Jet's Internet reservation system

2) Transfer Date and Transfer Method

- In the case of membership subscription, promptly transfer to the data server in Amazon Web Services' Tokyo through a security-reinforced private network

3) Types of overseas transfer

- Preserve personal Information

4) Items of Personal Information to be Transferred

- Eastar jet Membership Number, ID, Password, DI(Duplication Information), Contact number(Mobile phone number, e-mail), Name, Sex, Date of birth, Information on card(Card Number, Card expiration date), Bank account number, transaction authentication number, transaction number, Passport Information(Nationality, Passport number, passport expiration date, nation of passport issuance), whether or not to receive information on events

5) Staff in charge of managing information

- Address : 410 Terry Ave North Seattle, WA 98109-5210 USA

- FAX : +1-206-266-7010

6) Period of Retention and Use by Recipient

- Until the purposes of using the personal information are attained

6. Period for possession and use of person information

Eastar Jet possesses and uses customers' personal information for the period of providing services. When a user withdraws membership, the collected personal information is immediately destroyed to prevent its use or browsing of the information. However, when it is necessary to preserve the information in accordance with applicable laws, the information is preserved in accordance with such laws.

7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is as follows:
A. Destruction process

- Any personal information entered by a user for purposes such as membership subscription, after achievement of the purpose, will be destroyed for reasons of information protection. This is done as prescribed in Eastar Jet's internal policies and relevant laws.

- The aforementioned personal information, unless pursuant to relevant laws, will not be used for any purpose other than that of possessing the information.

B. Destruction method

- The personal information stored in the form of electronic file will be deleted using a technique which makes it impossible for the deleted information to be retrieved. The personal information printed on paper will be destroyed by shredding or incineration.

C. Introduction of the personal information usage period system

- Eastar Jet, to protect personal information of a long-term (1 year or more) non-user of service, began to periodically destroy such non-service user's personal information on August 18, 2015. The period of non-use of service will be calculated based on the date of final log-in. The necessary matters will be notified to the relevant users through emails, etc. at least 1 month before the aforementioned personal information is destroyed.

8. Rights and duties of users and legal representatives and methods to exercise
A. User and legal representatives with authority are entitled to browse and modify a member's personal information on "MYPAGE" of the website of Eastar Jet. When requests are made through e-mail or in writing to staff members in charge of managing personal information, the Company browses, modifies or deletes the information. ID, name and date of birth cannot be modified, but it can be exceptionally approved to change a name due to a changed name. Cases where deletion or modification is prohibited or limited in accordance with other legislations can be limited for processing. Further, when requests are made to modify errors in personal information, such personal information is not used or provided until the modification is completed unless provision of personal information is requested by other legislations. If incorrect personal information is already provided, result of modification is notified to a third party for modification.

B. Users and legal representatives are entitled to request the suspension of processing personal information on the website of Eastar Jet whenever they want. However, requests for suspension can be rejected in the following cases:
1) When it is inevitable to reject requests due to special legal regulations or compliance with legal duties

2) When it is possible to damage the life and body of others or infringe on property and interests of others unfairly

3) When information holders do not express their willingness to cancel the contract in cases where implementation of the contract cannot be conducted such as when agreed services with information holders cannot be provided unless personal information is processed

C. Members can withdraw agreed contents for collection, use and provision of personal information with membership whenever they want. As for withdrawal of consent, the Company takes necessary measures such as deletion of personal information without delay when users click "Withdrawal of membership" on the Company's website or contact staff members in charge of managing personal information in writing, on the phone or by e-mail. However, when the Company needs to preserve personal information of members in accordance with regulations of terms and conditions, processing of personal information can be limited. In such cases, members should notify their IDs and identification information to identify personal information, and some services are restricted or blocked due to withdrawal.

9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to protect personal information of children below the age of 14, and the Company does not collect children's personal information.

10. Installation, operation and rejection of devices to automatically collect personal information

The Company can install and operate cookies, which store and find customer information through provided Internet services. A cookie is character string information which is stored by a web server on a web browser and is sent for additional requests by the server. When customers access the website of Eastar Jet, the Company can provide customers with services without inputting additional information such as names by reading the contents of the cookie and finding additional information.

A. Customer information which is collected through cookies can be used for the following purposes:
1) Providing differentiated information depending on each sector of personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours for stay by members and non-members and identifying users' tastes and interests;
3) Providing personal customized services for the next time of access by tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer habits

B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option > Personal information > Advanced" at the upper part of web browser, give notification in installing cookies or reject all cookies. However, when customers reject installation of cookies, inconvenience or difficulties may be caused in using or providing services.

C. Cookies are terminated when the browser is closed or users are logged out.

11. Measures for technical and managerial protection of personal information
Eastar Jet handles the Users' privacy with technological and systematic approaches to prevent loss, theft, leakages, alteration, and compromise and to secure stability of the information as follows:

A. Encryption of personal information

User passwords are stored and managed by being encrypted in one way, and identification and change of personal information can be carried out only by a member who knows the passwords.

B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or compromised by hacking or computer viruses. The information is regularly backed up for data integrity and protected with the most up-to-date vaccine programs. All personal information is safely encrypted and transferred on the network.

Further, the company controls external access without permission by using a system for blocking infringement and strives to use every possible technical device to ensure security in other systems.

C. Minimization of employees in charge of processing personal information and education for the employees

The Company limits the number of employees in charge of managing personal information to a minimum and makes them recognize the importance of personal information protection through managerial measures such as education for staff members handling personal information.

D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected by checking whether measures for protecting personal information are implemented and staff members comply with regulations through the in-company organization for protection of personal information.

12. Staff in charge of managing personal information and contact numbers
Eastar Jet has designated relevant departments and staff members in charge of managing personal information to protect customer information and deal with complaints over the management of personal information.

Inquiry for personal information: Reservation Center 1544 - 0080

Staff in charge of managing personal information:

Name: Park Jong-tae, Team Leader of Information System Team 2
Email: [email protected]

Department in charge of managing personal information: Information System Division
Email: [email protected]

For other reports or counseling on the breach of privacy, please contact the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118 (http://privacy.kisa.or.kr)

- Personal Information Dispute Mediation Committee +82-2-2100-2499 (http://www.kopico.go.kr)

- Supreme Prosecutors' Office Cybercrime Investigation Department (without area code) 1301 (http://spo.go.kr)

- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 ( http://cyberbureau.police.go.kr )

13. Implementation of Personal Information Handling Policy and revised contents (Duty of notification)

Eastar Jet complies with all applicable laws and regulations including Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., Personal Information Protection Regulations, Use and Protection of Credit Information Act, Framework Act on Electronic Commerce, Guidelines for Consumer Protection in the Context of Electronic Commerce, etc. In consequence, Eastar Jet's Personal Information Handling Policy is subject to change at any time in accordance with applicable laws.

In case of the revision of the Personal Information Handling Policy, the company shall announce the date, reasons and contents of the revision on the website.

◈ Eastar Jet's revised Personal Information Handling Policy has been effective since December 1st, 2016.

Revision of Personal Information Handling Policy

- Personal Information Handling Policy Version : V2.3

- Date of revision for Personal Information Handling Policy : November 30, 2016

- Reasons of the revision for Personal Information Handling Policy : Change of name to Personal Information Handling Policy, change in personal information-processing contractors, and addition of personal information items notified as being transferred overseas

Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar Jet") considers the protection of users' personal information important and complies with regulations for the protection of personal information in relevant legislations such as "Personal Information Protection Act" and "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc."

The Company informs how and for which purposes the Company uses personal information offered by users and measures the Company takes to protect personal information by notifying the following personal information handling policy. The Company's Personal Information Handling Policy may change depending on changes in legislation and announcement or the Company's terms and conditions and internal policy; in cases of revision, the Company notifies changes to users or posts changes on the service screen.

Users are entitled to withhold consent for the collection, use, provision and consignment of the following personal information. However, when users withhold consent, whole or partial services cannot be used.

A. Purposes of personal information collection and use

Eastar Jet shall not use the personal information of the subject beyond the scope this article describes except for cases the subject of personal information agreed to or is defined by relevant laws.

① Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline tickets, delivery of various products such as airline tickets and souvenirs and events, granting and reviewing qualification as best members, providing customized services, verification of bank transactions and banking services, purchase and collection of fees

② Membership administration

Member verification regarding the membership service details, individual identification, protection from misuse by delinquent members and protection from unauthorized use, confirmation for the voluntary sign-up, limitation of sign-up and number of sign-ups, record preservation for resolution of the future dispute, complaints and requested issue handling, delivering of notifications

③ Use in the marketing and advertisement
Development and specialization of new services, provision of customized services, service offering and advertisements according to the attributes of demographic research, provision of information on products by the company and affiliates, identification of access frequency, statistics regarding the use of service by members, and delivering advertising information and providing participation opportunity in the events. (User personal information is not provided to individuals or groups which request advertising.)

B. Collected personal information

Eastar Jet collects the minimum personal information necessary to provide services.

① Membership on the website ( www.eastarjet.com)
Mandatory items: Name, Sex, ID, Passwords, Date of birth, Address and contact number (Mobile phone number, e-mail), CI (connected information), DI (duplication information)

Selected items: Home phone number, Password information (Name in English, Password number, Date of expiration, Nationality, Nation of issuance), Receiving information such as events

② Membership on the mobile page (m.eastarjet.com)
Mandatory items: Name, Sex, ID, Passwords, Date of birth, Contact number (Mobile phone number, e-mail), CI (connected information), DI (duplication information)

Selected items: Receiving information such as events

③ In using services
Domestic lines: Reserved user information (Contact number, e-mail), Information on a person on board (Name, sex, date of birth), Payment information (Credit card information, bank account information)
International lines: Reserved user information (Contact number, e-mail), Information on a person on board (Name in English, sex, date of birth, passport number, passport expiration date, nation of passport issuance) Payment information (Credit card information, bank account information)

④ The following information can be created and collected in the process of using services or business:

Records of using services, Access log, Access IP, Payment records

⑤ In applying for an event: ID, Name, Address, Sex, Date of birth, Contact number (Phone number or e-mail)

C. Provision of personal information to a third party
Eastar Jet uses users' personal information within the notified extent of "Collection and Use of Personal Information" and does not use the information beyond that extent without prior consent from users nor provide a third party with personal information. However, the following cases are exceptions:

① When users consent to opening information or offering information to a third party in advance

② When requests are given from an investigation institution and supervisory authorities in accordance with regulations in the law or procedure and methods stipulated in the legislations with the purpose of investigation and inspection

D. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the implementation of contracts and provision of services to external companies as follows:

E. Period for possession and use of person information

Eastar Jet possesses and uses customers' personal information for the period of providing services. When users withdraw membership, collected personal information is shredded to prevent the use or browsing of the information. However, when it is necessary to preserve the information in accordance with regulations in relevant legislations, the information is preserved in accordance with the legislations.

- Records regarding contract or withdrawal of subscription
Reason for retention: Article 6 of the Act on Consumer Protection in Electronic Commerce, etc. and Article 6 of the enforcement ordinance
Retention period: 5 years

- Records regarding payments and provision of goods

Reason for retention: Article 6 of the Act on Consumer Protection in Electronic Commerce, etc. and Article 6 of the enforcement ordinance
Retention period: 5 years
- Records regarding processing of consumer complaints or conflicts
Reason for retention: Article 6 of the Act on Consumer Protection in Electronic Commerce, etc. and Article 6 of the enforcement ordinance
Retention period: 3 years
- Records regarding access
Reason for retention: Article 15-2 of Protection of Communications Secrets Act and Article 41 of the enforcement ordinance
Retention period: 3 months

F. Procedure for the disposal of personal information
Eastar Jet in principle disposes of Users' personal information without delay after the stated goals are fulfilled. Eastar Jet destroys the personal information in the following procedures and ways;

The information printed out on paper is destroyed through paper shredder or burned. The personal information stored in files is deleted in technical ways that prevent any recovery of the record.

G. Rights and duties of users and legal representatives and methods to exercise
① User and legal representatives with authority are entitled to browse and modify a member's personal information on "MYPAGE" of the website of Eastar Jet. When requests are made through e-mail or in writing to staff members in charge of managing personal information, the Company browses, modifies or deletes the information. ID, name and date of birth cannot be modified, but it can be exceptionally approved to change a name due to a changed name. Cases where deletion or modification is prohibited or limited in accordance with other legislations can be limited for processing. Further, when requests are made to modify errors in personal information, such personal information is not used or provided until the modification is completed unless provision of personal information is requested by other legislations. If incorrect personal information is already provided, result of modification is notified to a third party for modification.

② Users and legal representatives are entitled to request the suspension of processing personal information on the website of Eastar Jet whenever they want. However, requests for suspension can be rejected in the following cases:
1) When it is inevitable to reject requests due to special legal regulations or compliance with legal duties

2) When it is possible to damage the life and body of others or infringe on property and interests of others unfairly

3) When information holders do not express their willingness to cancel the contract in cases where implementation of the contract cannot be conducted such as when agreed services with information holders cannot be provided unless personal information is processed

③ Members can withdraw agreed contents for collection, use and provision of personal information with membership whenever they want. As for withdrawal of consent, the Company takes necessary measures such as deletion of personal information without delay when users click "Withdrawal of membership" on the Company's website or contact staff members in charge of managing personal information in writing, on the phone or by e-mail. However, when the Company needs to preserve personal information of members in accordance with regulations of terms and conditions, processing of personal information can be limited. In such cases, members should notify their IDs and identification information to identify personal information, and some services are restricted or blocked due to withdrawal.

H. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to protect personal information of children below the age of 14, and the Company does not collect children's personal information.

I. Installation, operation and rejection of devices to automatically collect personal information

The Company can install and operate cookies, which store and find customer information through provided Internet services. A cookie is character string information which is stored by a web server on a web browser and is sent for additional requests by the server. When customers access the website of Eastar Jet, the Company can provide customers with services without inputting additional information such as names by reading the contents of the cookie and finding additional information.

① Customer information which is collected through cookies can be used for the following purposes:
1) Providing differentiated information depending on each sector of personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours for stay by members and non-members and identifying users' tastes and interests;
3) Providing personal customized services for the next time of access by tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer habits

② Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option > Personal information > Advanced" at the upper part of web browser, give notification in installing cookies or reject all cookies. However, when customers reject installation of cookies, inconvenience or difficulties may be caused in using or providing services.

③ Cookies are terminated when the browser is closed or users are logged out.

J. Measures for technical and managerial protection of personal information
Eastar Jet handles the Users' privacy with technological and systematic approaches to prevent loss, theft, leakages, alteration, and compromise and to secure stability of the information as follows:

① Encryption of personal information

User passwords are stored and managed by being encrypted in one way, and identification and change of personal information can be carried out only by a member who knows the passwords.

② Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or compromised by hacking or computer viruses. The information is regularly backed up for data integrity and protected with the most up-to-date vaccine programs. All personal information is safely encrypted and transferred on the network.

Further, the company controls external access without permission by using a system for blocking infringement and strives to use every possible technical device to ensure security in other systems.

③ Minimization of employees in charge of processing personal information and education for the employees

The Company limits the number of employees in charge of managing personal information to a minimum and makes them recognize the importance of personal information protection through managerial measures such as education for staff members handling personal information.

④ Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected by checking whether measures for protecting personal information are implemented and staff members comply with regulations through the in-company organization for protection of personal information.

K. Staff in charge of managing personal information and contact numbers
Eastar Jet has designated relevant departments and staff members in charge of managing personal information to protect customer information and deal with complaints over the management of personal information.

Inquiry for personal information: Reservation Center 1544 - 0080

Staff in charge of managing personal information:

Name: Park Jong-uk, Head of Information System Division
Email: [email protected]

Department in charge of managing personal information: Information System Division
Email: [email protected]


For other reports or counseling on the breach of privacy, please contact the following institutions;
- KISA PRIVACY center (www.118.or.kr/118)
- Supreme Prosecutors' Office Cybercrime Investigation Department (www.spo.go.kr/02-3480-2000)
- Korean National Police Agency cyber terror response center (www.ctrc.go.kr/182)

L. Implementation of Personal Information Handling Policy and revised contents (Duty of notification)

Eastar Jet complies with all applicable laws and regulations including Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., Personal Information Protection Regulations, Use and Protection of Credit Information Act, Framework Act on Electronic Commerce, Guidelines for Consumer Protection in the Context of Electronic Commerce, etc. In consequence, Eastar Jet's Personal Information Handling Policy is subject to change at any time in accordance with applicable laws.

In case of the revision of the Personal Information Handling Policy, the company shall announce the date, reasons and contents of the revision on the website.

◈ Eastar Jet's revised Personal Information Handling Policy has been effective since March 23, 2015.

Revision of Personal Information Handling Policy
- Personal Information Handling Policy Version: V2.2
- Date of revision for Personal Information Handling Policy: March 23, 2015
- Reasons of the revision for Personal Information Handling Policy: Change in items for collected personal information, Deletion of use of collected personal information and provision to a third party, Deletion of the item for the period of possession and use of personal information