-
Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar
Jet") considers the protection of users' personal information important and
complies with regulations for the protection of personal information in
relevant legislations such as "Personal Information Protection Act" and
"Act on Promotion of Information and Communications Network Utilization and
Information Protection, etc."
The Company informs how and for which purposes the Company uses personal
information offered by users and measures the Company takes to protect
personal information by notifying the following personal information
handling policy. The Company's Personal Information Handling Policy may
change depending on changes in legislation and announcement or the
Company's terms and conditions and internal policy; in cases of revision,
the Company notifies changes to users or posts changes on the service
screen.
Users are entitled to withhold consent for the collection, use, provision
and consignment of the following personal information. However, when users
withhold consent, whole or partial services cannot be used.
1. Purposes of personal information collection and use
Eastar Jet shall not use the personal information of the subject beyond the
scope this article describes except for cases the subject of personal
information agreed to or is defined by relevant laws.
A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline
tickets, delivery of various products such as airline tickets and souvenirs
and events, granting and reviewing qualification as best members, providing
customized services, verification of bank transactions and banking
services, purchase and collection of fees
B. Membership administration
Member verification regarding the membership service details, individual
identification, protection from misuse by delinquent members and protection
from unauthorized use, confirmation for the voluntary sign-up, limitation
of sign-up and number of sign-ups, record preservation for resolution of
the future dispute, complaints and requested issue handling, delivering of
notifications
C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized
services, service offering and advertisements according to the attributes
of demographic research, provision of information on products by the
company and affiliates, identification of access frequency, statistics
regarding the use of service by members, and delivering advertising
information and providing participation opportunity in the events. (User
personal information is not provided to individuals or groups which request
advertising.) Separate consent is required for use of personal information
for marketing and advertising purposes. Even when the user refuses to give
such consent, there will be no restrictions in the use of services.
D. Inquiries related promotion affiliation
Collection of information related to promotion and other marketing activities
2. Collected personal information
Eastar Jet collects the minimum personal information necessary to provide
services.
A. Membership on the website ( www.eastarjet.com)
|
Category
|
Items
|
|
Membership
|
Mandatory
|
Name, Date of Birth, Gender, e-mail, Password, Mobile phone number, ID, Nationality, country of residence, DI(Duplication Information)
|
|
Optional
|
Whether to receive/receiving event information, address
|
※ In the case of a subscription to preferred membership, "company name"
will also be collected.
B. Ticket reservation and payment by members and non-members
|
Category
|
Items
|
|
Domestic Lines
|
Mandatory
|
Reserved user information(Name, Contact number, e-mail), Primary passenger contact information, Information on a person on board(Name, Gender, Date of birth), Payment information (Credit card information, bank account information)
|
|
Optional
|
Applicable personal information when selecting the discount
|
|
International Lines
|
Mandatory
|
Reserved user information(Name, Contact number, e-mail), Primary passenger contact information, Information on a person on board(Name in English, Gender, Date of birth), Payment information (Credit card information, bank account information)
|
|
Optional
|
Passport Information on a person onboard(Nationality,
Passport number, passport expiration date, nation of passport issuance)
|
C. Other services
|
Category
|
Items
|
| Login |
Member |
e-mail, ID, Password |
| Non-Member |
Ticket reservation number, Name, e-mail |
| Opinion from Clients |
Member |
Name, Contact number(Mobile phone number), e-mail |
| Non-Member |
Marketing
Alliance Inquiry |
Mandatory |
Name, Company Contact number, e-mail |
| Optional |
- |
| Group Booking |
Mandatory |
Name, Mobile phone number, Contact number, e-mail |
| Optional |
- |
D. The following information can be created and collected in the process of
using services or business
- Records of using services, Access log, Access IP, Payment records
E. In applying for an event
- ID, Name, Address, Gender, Date of Birth, Contact number (Mobile phone number or -email)
※ The personal information subject to collection may vary depending on the purpose and requirement of each event.
3. Consent to Transfer of Personal Information to a Third Party
Eastar Jet uses a user's personal information to the extent notified in
"Collection and Use of Personal Information." The Company does not use the
information beyond that extent nor provide a third party with personal
information without prior consent from the user. Exceptions to this are
made in exceptional circumstances, such as where the user has given prior
consent to the disclosure or provision of his or her personal information
to a third party. Easter Jet is also obligated to provide a user's personal
information in accordance with the law, or where a request has been made by
crime investigation agencies or supervisory authorities pursuant to the
procedure and methods of applicable laws for the purpose of crime
investigation or inspection. These cases, however, are exceptions.
|
Recipient Name
|
Recipient's Purpose of Using the Personal Information
|
Retention Period
|
Provided information
|
|
t'way Air
|
flights with codeshare service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Gender, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
|
Hong Kong Express Airway Limited
|
flights with interline service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Gender, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the
implementation of contracts and provision of services to external companies
as follows:
|
Category
|
Service entrusted
|
Entrusted company
|
Information provided Retention /Use Period
|
|
Website
|
Real name verification and identification
|
NICE Information Service Co., Ltd.
|
Until the purposes of using the personal information
are attained
|
|
Payment process for Eastar Jet's paid products and
services such as airline tickets
|
First Data Korea co., Ltd. KRP, KSNET, Korea
Financial Telecommunications & Clearings Institute,
econtext, NHN PAYCO Corp. , kakaopay corp.
|
|
Service Infra
|
Providing stable services for the internet reservation
system
|
ContentsBrdige, JS Information System Co., Ltd., Nexus Community, COMAS, Inc.
|
|
Reservation Center
|
Consultation on reservation and ticketing, providing
information and services on using air transport and
|
Good TM Co., Ltd.
|
|
Booking system
|
Providing services for air flights such as reservation
|
Navitaire Amadeus IT Group S.A.
|
|
Airport branch office
|
Tasks regarding reservation and transport such as
boarding procedure
|
Domestic - EASTARPORT Co., Ltd.
Overseas - Overseas associated company
▶ See Status of associated companies
|
▼ Status of associated companies(Ground Handling Company)
|
Region
|
Ground Handling Company
|
|
JAPAN
|
FMG INC.
|
|
Swissport Japan Ltd
|
|
Cast Co., Ltd
|
|
All Nippon Airways
|
|
THAILAND
|
Bangkok Flight Service Co.,Ltd
|
|
BANGKOK AIR GROUND HANDLING CO., LTD.
|
|
MALAYSIA
|
MALAYSIAN AIRLINE SYSTEM BERHAD
|
|
TAIWAN
|
EVA AIRWAYS CORPORATION
|
|
HONGKONG
|
Jardine Airport Services.,Ltd
|
|
VIETNAM
|
Hanoi Ground Services
|
|
Vietnam Airport Ground Services Company Limited
|
|
CHINA
|
SHE) ShenYang TaoXian International Airport
Co.,Ltd.(沈阳桃仙国际机场股份有限公司)
TAN) Jinan International Airport Co.,Ltd.(济南国际机场股份有限公司)
PVG) Shanghai International Airport Services
Co.,Ltd.(上海国际机场地面服务有限公司)
YNJ) Yanji chaoyangchun International Airport
DLC) Dalian Zhoushuizi Internatioinal Airport Co.,Ltd.
HRB) Heilongjiang Airport
NGB) Jinjiang quanzhou Internatioinal Airport Co.,Ltd.
JNI) Ningbo Airport & Logistics Development Group
Co.,Ltd.(宁波机场与物流发展集团有限公司)
|
5. Overseas Transfer of Personal Information
Eastar Jet will transfer personal information overseas as follows to
operate its reservation and transportation system. A user has the right to
refuse to consent to such overseas transfer of personal information. If a
user refuses to consent to overseas transfer of personal information,
however, then the purpose of such overseas transfer cannot be achieved.
Thus, there may be difficulties in the use of services.
| Information to be transferred |
Purpose of Use |
Transfer Date and Transfer Method |
Types of overseas transfer |
Items of Personal Information to be Transferred |
Staff in charge of managing information |
Period of Retention and Use by Recipient |
| NAVITAIRE LLC An Amadeus company (Australia) |
Operate Eastar Jet's reservation system and keep reservation records |
Transmission through public network for ticket reservation/payment, creation of membershipaccount, and updating account information(subjected to security protocol) |
Contracting (or outsourcing) of personal information processing and preservation of personal information |
Eastarjet Membership Number, ID, Password, DI(Duplication Information), Contact number(Mobile phone number, e-mail), Name, Gender, Date of birth, Information on card(Card Number, Card expiration date), Bank account number, transaction authentication number, transaction number, Passport Information(Nationality, Passport number, passport expiration date, nation of passport issuance), whether or not to receive information on events |
e-mail:
[email protected] |
Until the purposes of using the personal information are attained |
6. Period for possession and use of person information
Eastar Jet possesses and uses customers' personal information for the
period of providing services. When a user withdraws membership, the
collected personal information is immediately destroyed to prevent its use
or browsing of the information. However, when it is necessary to preserve
the information in accordance with applicable laws, the information is
preserved in accordance with such laws.
|
Applicable Personal Information
|
Related services
|
Reason for retention (Relevant laws)
|
Retention period
|
|
Records regarding contract or withdrawal of
subscription
|
Join Membership |
Article 6 of the Act on Consumer Protection in
Electronic Commerce, etc. and Article 6 of the
enforcement ordinance
|
5 years
|
|
Records regarding payments and provision of goods
|
Reservation, issuance and payment of flight tickets (including members/non-members)
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
5 years
|
|
Records regarding processing of consumer complaints or
conflicts
|
Opinion from customers
(including members/non-members)
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
3 years
|
|
Records regarding access
|
Login
|
Reason for retention: Article 15-2 of Protection of
Communications Secrets Act and Article 41 of the
enforcement ordinance
|
3 months
|
7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal
information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is
as follows:
A. Destruction process
- Any personal information entered by a user for purposes such as
membership subscription, after achievement of the purpose, will be
destroyed for reasons of information protection. This is done as prescribed
in Eastar Jet's internal policies and relevant laws.
- The aforementioned personal information, unless pursuant to relevant
laws, will not be used for any purpose other than that of
possessing the information.
B. Destruction method
- The personal information stored in the form of electronic file will be
deleted using a technique which makes it impossible for the deleted
information to be retrieved. The personal information printed on paper will
be destroyed by shredding or incineration.
C. Introduction of the personal information usage period system
- To protect the personal information of any person not using the service for a long period (1 year or longer), Eastar Jet shall classify those non-users as a dormant account from June 5, 2019, in a way to safely separate and retain the personal information.
Based on the final log-in date, the period of non-use (1 year) is calculated to separately keep the personal information of the non-users and the relevant contents shall be notified to the applicable user through e-mail and others at least one month in advance.
If Eastar Jet obtains separate request from the user to store the personal information for a certain period, the above period may be set differently.
With the exception of cases with special provisions in the relevant laws and regulations, the applicable personal information shall not be used and provided.
In the event that the service of Eastar Jet is intended to be used continuously until it is converted into a dormant account, please log in to the web-site or mobile App of Eastar Jet.
8. Rights and duties of users and legal representatives and methods to
exercise
A. User and legal representatives with authority are entitled to browse and
modify a member's personal information on "MYPAGE" of the website of Eastar
Jet. When requests are made through e-mail or in writing to staff members
in charge of managing personal information, the Company browses, modifies
or deletes the information. ID, name and date of birth cannot be modified,
but it can be exceptionally approved to change a name due to a changed
name. Cases where deletion or modification is prohibited or limited in
accordance with other legislations can be limited for processing. Further,
when requests are made to modify errors in personal information, such
personal information is not used or provided until the modification is
completed unless provision of personal information is requested by other
legislations. If incorrect personal information is already provided, result
of modification is notified to a third party for modification.
B. Users and legal representatives are entitled to request the suspension
of processing personal information on the website of Eastar Jet whenever
they want. However, requests for suspension can be rejected in the
following cases:
1) When it is inevitable to reject requests due to special legal
regulations or compliance with legal duties
2) When it is possible to damage the life and body of others or infringe on
property and interests of others unfairly
3) When information holders do not express their willingness to cancel the
contract in cases where implementation of the contract cannot be conducted
such as when agreed services with information holders cannot be provided
unless personal information is processed
C. Members can withdraw agreed contents for collection, use and provision
of personal information with membership whenever they want. As for
withdrawal of consent, the Company takes necessary measures such as
deletion of personal information without delay when users click "Withdrawal
of membership" on the Company's website or contact staff members in charge
of managing personal information in writing, on the phone or by e-mail.
However, when the Company needs to preserve personal information of members
in accordance with regulations of terms and conditions, processing of
personal information can be limited. In such cases, members should notify
their IDs and identification information to identify personal information,
and some services are restricted or blocked due to withdrawal.
9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to
protect personal information of children below the age of 14, and the
Company does not collect children's personal information.
10. Installation, operation and rejection of devices to automatically
collect personal information
The Company can install and operate cookies, which store and find customer
information through provided Internet services. A cookie is character
string information which is stored by a web server on a web browser and is
sent for additional requests by the server. When customers access the
website of Eastar Jet, the Company can provide customers with services
without inputting additional information such as names by reading the
contents of the cookie and finding additional information.
A. Customer information which is collected through cookies can be used for
the following purposes:
1) Providing differentiated information depending on each sector of
personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours
for stay by members and non-members and identifying users' tastes and
interests;
3) Providing personal customized services for the next time of access by
tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer
habits
B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option >
Personal information > Advanced" at the upper part of web browser, give
notification in installing cookies or reject all cookies. However, when
customers reject installation of cookies, inconvenience or difficulties may
be caused in using or providing services.
C. Cookies are terminated when the browser is closed or users are logged
out.
11. Measures for technical and managerial protection of personal
information
Eastar Jet handles the Users' privacy with technological and systematic
approaches to prevent loss, theft, leakages, alteration, and compromise and
to secure stability of the information as follows:
A. Encryption of personal information
User passwords are stored and managed by being encrypted in one way, and
identification and change of personal information can be carried out only
by a member who knows the passwords.
B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or
compromised by hacking or computer viruses. The information is regularly
backed up for data integrity and protected with the most up-to-date vaccine
programs. All personal information is safely encrypted and transferred on
the network.
Further, the company controls external access without permission by using a
system for blocking infringement and strives to use every possible
technical device to ensure security in other systems.
C. Minimization of employees in charge of processing personal information
and education for the employees
The Company limits the number of employees in charge of managing personal
information to a minimum and makes them recognize the importance of
personal information protection through managerial measures such as
education for staff members handling personal information.
D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected
by checking whether measures for protecting personal information are
implemented and staff members comply with regulations through the
in-company organization for protection of personal information.
12. Staff in charge of managing personal information and contact
numbers
Eastar Jet has designated relevant departments and staff members in charge
of managing personal information to protect customer information and deal
with complaints over the management of personal information.
Inquiry for personal information: Reservation Center 1544 - 0080
Staff in charge of managing personal information:
Name: JongGu Choi
Email: [email protected]
Department in charge of managing personal information: Information Strategy Department
Email: [email protected]
For other reports or counseling on the breach of privacy, please contact
the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118
(http://privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee 1833-6972 (http://www.kopico.go.kr)
- Supreme Prosecutors' Office Cybercrime Investigation Department (without area code)1301 (http://spo.go.kr)
- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 ( http://cyber.go.kr )
13. Implementation of Personal Information Handling Policy and revised
contents (Duty of notification)
Eastar Jet complies with all applicable laws and regulations including Act
on Promotion of Information and Communications Network Utilization and
Information Protection, etc., Personal Information Protection Regulations,
Use and Protection of Credit Information Act, Framework Act on Electronic
Commerce, Guidelines for Consumer Protection in the Context of Electronic
Commerce, etc. In consequence, Eastar Jet's Personal Information Handling
Policy is subject to change at any time in accordance with applicable laws.
In case of the revision of the Personal Information Handling Policy, the
company shall announce the date, reasons and contents of the revision on
the website.
◈ Eastar Jet's revised Personal Information Handling Policy has been
effective since January 20, 2020.
Revision of Personal Information Handling Policy
- Personal Information Handling Policy Version : V2.8
- Date of revision for Personal Information Handling Policy : January 20, 2020
- Reasons of the revision for Personal Information Handling Policy : Change terminology and update personal information collection items
-
Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar
Jet") considers the protection of users' personal information important and
complies with regulations for the protection of personal information in
relevant legislations such as "Personal Information Protection Act" and
"Act on Promotion of Information and Communications Network Utilization and
Information Protection, etc."
The Company informs how and for which purposes the Company uses personal
information offered by users and measures the Company takes to protect
personal information by notifying the following personal information
handling policy. The Company's Personal Information Handling Policy may
change depending on changes in legislation and announcement or the
Company's terms and conditions and internal policy; in cases of revision,
the Company notifies changes to users or posts changes on the service
screen.
Users are entitled to withhold consent for the collection, use, provision
and consignment of the following personal information. However, when users
withhold consent, whole or partial services cannot be used.
1. Purposes of personal information collection and use
Eastar Jet shall not use the personal information of the subject beyond the
scope this article describes except for cases the subject of personal
information agreed to or is defined by relevant laws.
A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline
tickets, delivery of various products such as airline tickets and souvenirs
and events, granting and reviewing qualification as best members, providing
customized services, verification of bank transactions and banking
services, purchase and collection of fees
B. Membership administration
Member verification regarding the membership service details, individual
identification, protection from misuse by delinquent members and protection
from unauthorized use, confirmation for the voluntary sign-up, limitation
of sign-up and number of sign-ups, record preservation for resolution of
the future dispute, complaints and requested issue handling, delivering of
notifications
C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized
services, service offering and advertisements according to the attributes
of demographic research, provision of information on products by the
company and affiliates, identification of access frequency, statistics
regarding the use of service by members, and delivering advertising
information and providing participation opportunity in the events. (User
personal information is not provided to individuals or groups which request
advertising.) Separate consent is required for use of personal information
for marketing and advertising purposes. Even when the user refuses to give
such consent, there will be no restrictions in the use of services.
D. Inquiries related promotion affiliation
Collection of information related to promotion and other marketing activities
2. Collected personal information
Eastar Jet collects the minimum personal information necessary to provide
services.
A. Membership on the website ( www.eastarjet.com)
|
Category
|
Items
|
|
Membership
|
Mandatory
|
Name, Date of Birth, Gender, e-mail, Password, Mobile phone number, ID, Nationality, country of residence, DI(Duplication Information)
|
|
Optional
|
Whether to receive/receiving event information, address, Recommended employee number
|
※ In the case of a subscription to preferred membership, "company name"
will also be collected.
B. Ticket reservation and payment by members and non-members
|
Category
|
Items
|
|
Domestic Lines
|
Mandatory
|
Reserved user information(Name, Contact number, e-mail), Primary passenger contact information, Information on a person on board(Name, Gender, Date of birth), Payment information (Credit card information, bank account information)
|
|
Optional
|
Applicable personal information when selecting the discount
|
|
International Lines
|
Mandatory
|
Reserved user information(Name, Contact number, e-mail), Primary passenger contact information, Information on a person on board(Name in English, Gender, Date of birth), Payment information (Credit card information, bank account information)
|
|
Optional
|
Passport Information on a person onboard(Nationality,
Passport number, passport expiration date, nation of passport issuance), Recommended employee number
|
C. Other services
|
Category
|
Items
|
| Login |
Member |
e-mail, ID, Password |
| Non-Member |
Ticket reservation number, Name, e-mail |
| Opinion from Clients |
Member |
Name, Contact number(Mobile phone number), e-mail |
| Non-Member |
Marketing
Alliance Inquiry |
Mandatory |
Name, Company Contact number, e-mail |
| Optional |
- |
| Group Booking |
Mandatory |
Name, Mobile phone number, Contact number, e-mail |
| Optional |
- |
D. The following information can be created and collected in the process of
using services or business
- Records of using services, Access log, Access IP, Payment records
E. In applying for an event
- ID, Name, Address, Gender, Date of Birth, Contact number (Mobile phone number or -email)
※ The personal information subject to collection may vary depending on the purpose and requirement of each event.
3. Consent to Transfer of Personal Information to a Third Party
Eastar Jet uses a user's personal information to the extent notified in
"Collection and Use of Personal Information." The Company does not use the
information beyond that extent nor provide a third party with personal
information without prior consent from the user. Exceptions to this are
made in exceptional circumstances, such as where the user has given prior
consent to the disclosure or provision of his or her personal information
to a third party. Easter Jet is also obligated to provide a user's personal
information in accordance with the law, or where a request has been made by
crime investigation agencies or supervisory authorities pursuant to the
procedure and methods of applicable laws for the purpose of crime
investigation or inspection. These cases, however, are exceptions.
|
Recipient Name
|
Recipient's Purpose of Using the Personal Information
|
Retention Period
|
Provided information
|
|
t'way Air
|
flights with codeshare service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Gender, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
|
Hong Kong Express Airway Limited
|
flights with interline service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Gender, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the
implementation of contracts and provision of services to external companies
as follows:
|
Category
|
Service entrusted
|
Entrusted company
|
Information provided Retention /Use Period
|
|
Website
|
Real name verification and identification
|
NICE Information Service Co., Ltd.
|
Until the purposes of using the personal information
are attained
|
|
Payment process for Eastar Jet's paid products and
services such as airline tickets
|
First Data Korea co., Ltd. KRP, KSNET, Korea
Financial Telecommunications & Clearings Institute,
econtext, NHN PAYCO Corp. , kakaopay corp.
|
|
Service Infra
|
Providing stable services for the internet reservation
system
|
ContentsBrdige, JS Information System Co., Ltd., Nexus Community, COMAS, Inc.
|
|
Reservation Center
|
Consultation on reservation and ticketing, providing
information and services on using air transport and
|
Good TM Co., Ltd.
|
|
Booking system
|
Providing services for air flights such as reservation
|
Navitaire Amadeus IT Group S.A.
|
|
Airport branch office
|
Tasks regarding reservation and transport such as
boarding procedure
|
Domestic - EASTARPORT Co., Ltd.
Overseas - Overseas associated company
▶ See Status of associated companies
|
▼ Status of associated companies(Ground Handling Company)
|
Region
|
Ground Handling Company
|
|
JAPAN
|
FMG INC.
|
|
Swissport Japan Ltd
|
|
Cast Co., Ltd
|
|
All Nippon Airways
|
|
THAILAND
|
Bangkok Flight Service Co.,Ltd
|
|
BANGKOK AIR GROUND HANDLING CO., LTD.
|
|
MALAYSIA
|
MALAYSIAN AIRLINE SYSTEM BERHAD
|
|
TAIWAN
|
EVA AIRWAYS CORPORATION
|
|
HONGKONG
|
Jardine Airport Services.,Ltd
|
|
VIETNAM
|
Hanoi Ground Services
|
|
Vietnam Airport Ground Services Company Limited
|
|
CHINA
|
SHE) ShenYang TaoXian International Airport
Co.,Ltd.(沈阳桃仙国际机场股份有限公司)
TAN) Jinan International Airport Co.,Ltd.(济南国际机场股份有限公司)
PVG) Shanghai International Airport Services
Co.,Ltd.(上海国际机场地面服务有限公司)
YNJ) Yanji chaoyangchun International Airport
DLC) Dalian Zhoushuizi Internatioinal Airport Co.,Ltd.
HRB) Heilongjiang Airport
NGB) Jinjiang quanzhou Internatioinal Airport Co.,Ltd.
JNI) Ningbo Airport & Logistics Development Group
Co.,Ltd.(宁波机场与物流发展集团有限公司)
|
5. Overseas Transfer of Personal Information
Eastar Jet will transfer personal information overseas as follows to
operate its reservation and transportation system. A user has the right to
refuse to consent to such overseas transfer of personal information. If a
user refuses to consent to overseas transfer of personal information,
however, then the purpose of such overseas transfer cannot be achieved.
Thus, there may be difficulties in the use of services.
| Information to be transferred |
Purpose of Use |
Transfer Date and Transfer Method |
Types of overseas transfer |
Items of Personal Information to be Transferred |
Staff in charge of managing information |
Period of Retention and Use by Recipient |
| NAVITAIRE LLC An Amadeus company (Australia) |
Operate Eastar Jet's reservation system and keep reservation records |
Transmission through public network for ticket reservation/payment, creation of membershipaccount, and updating account information(subjected to security protocol) |
Contracting (or outsourcing) of personal information processing and preservation of personal information |
Eastarjet Membership Number, ID, Password, DI(Duplication Information), Contact number(Mobile phone number, e-mail), Name, Gender, Date of birth, Information on card(Card Number, Card expiration date), Bank account number, transaction authentication number, transaction number, Passport Information(Nationality, Passport number, passport expiration date, nation of passport issuance), whether or not to receive information on events |
e-mail:
[email protected] |
Until the purposes of using the personal information are attained |
6. Period for possession and use of person information
Eastar Jet possesses and uses customers' personal information for the
period of providing services. When a user withdraws membership, the
collected personal information is immediately destroyed to prevent its use
or browsing of the information. However, when it is necessary to preserve
the information in accordance with applicable laws, the information is
preserved in accordance with such laws.
|
Applicable Personal Information
|
Related services
|
Reason for retention (Relevant laws)
|
Retention period
|
|
Records regarding contract or withdrawal of
subscription
|
Join Membership |
Article 6 of the Act on Consumer Protection in
Electronic Commerce, etc. and Article 6 of the
enforcement ordinance
|
5 years
|
|
Records regarding payments and provision of goods
|
Reservation, issuance and payment of flight tickets (including members/non-members)
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
5 years
|
|
Records regarding processing of consumer complaints or
conflicts
|
Opinion from customers
(including members/non-members)
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
3 years
|
|
Records regarding access
|
Login
|
Reason for retention: Article 15-2 of Protection of
Communications Secrets Act and Article 41 of the
enforcement ordinance
|
3 months
|
7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal
information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is
as follows:
A. Destruction process
- Any personal information entered by a user for purposes such as
membership subscription, after achievement of the purpose, will be
destroyed for reasons of information protection. This is done as prescribed
in Eastar Jet's internal policies and relevant laws.
- The aforementioned personal information, unless pursuant to relevant
laws, will not be used for any purpose other than that of
possessing the information.
B. Destruction method
- The personal information stored in the form of electronic file will be
deleted using a technique which makes it impossible for the deleted
information to be retrieved. The personal information printed on paper will
be destroyed by shredding or incineration.
C. Introduction of the personal information usage period system
- To protect the personal information of any person not using the service for a long period (1 year or longer), Eastar Jet shall classify those non-users as a dormant account from June 5, 2019, in a way to safely separate and retain the personal information.
Based on the final log-in date, the period of non-use (1 year) is calculated to separately keep the personal information of the non-users and the relevant contents shall be notified to the applicable user through e-mail and others at least one month in advance.
If Eastar Jet obtains separate request from the user to store the personal information for a certain period, the above period may be set differently.
With the exception of cases with special provisions in the relevant laws and regulations, the applicable personal information shall not be used and provided.
In the event that the service of Eastar Jet is intended to be used continuously until it is converted into a dormant account, please log in to the web-site or mobile App of Eastar Jet.
8. Rights and duties of users and legal representatives and methods to
exercise
A. User and legal representatives with authority are entitled to browse and
modify a member's personal information on "MYPAGE" of the website of Eastar
Jet. When requests are made through e-mail or in writing to staff members
in charge of managing personal information, the Company browses, modifies
or deletes the information. ID, name and date of birth cannot be modified,
but it can be exceptionally approved to change a name due to a changed
name. Cases where deletion or modification is prohibited or limited in
accordance with other legislations can be limited for processing. Further,
when requests are made to modify errors in personal information, such
personal information is not used or provided until the modification is
completed unless provision of personal information is requested by other
legislations. If incorrect personal information is already provided, result
of modification is notified to a third party for modification.
B. Users and legal representatives are entitled to request the suspension
of processing personal information on the website of Eastar Jet whenever
they want. However, requests for suspension can be rejected in the
following cases:
1) When it is inevitable to reject requests due to special legal
regulations or compliance with legal duties
2) When it is possible to damage the life and body of others or infringe on
property and interests of others unfairly
3) When information holders do not express their willingness to cancel the
contract in cases where implementation of the contract cannot be conducted
such as when agreed services with information holders cannot be provided
unless personal information is processed
C. Members can withdraw agreed contents for collection, use and provision
of personal information with membership whenever they want. As for
withdrawal of consent, the Company takes necessary measures such as
deletion of personal information without delay when users click "Withdrawal
of membership" on the Company's website or contact staff members in charge
of managing personal information in writing, on the phone or by e-mail.
However, when the Company needs to preserve personal information of members
in accordance with regulations of terms and conditions, processing of
personal information can be limited. In such cases, members should notify
their IDs and identification information to identify personal information,
and some services are restricted or blocked due to withdrawal.
9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to
protect personal information of children below the age of 14, and the
Company does not collect children's personal information.
10. Installation, operation and rejection of devices to automatically
collect personal information
The Company can install and operate cookies, which store and find customer
information through provided Internet services. A cookie is character
string information which is stored by a web server on a web browser and is
sent for additional requests by the server. When customers access the
website of Eastar Jet, the Company can provide customers with services
without inputting additional information such as names by reading the
contents of the cookie and finding additional information.
A. Customer information which is collected through cookies can be used for
the following purposes:
1) Providing differentiated information depending on each sector of
personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours
for stay by members and non-members and identifying users' tastes and
interests;
3) Providing personal customized services for the next time of access by
tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer
habits
B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option >
Personal information > Advanced" at the upper part of web browser, give
notification in installing cookies or reject all cookies. However, when
customers reject installation of cookies, inconvenience or difficulties may
be caused in using or providing services.
C. Cookies are terminated when the browser is closed or users are logged
out.
11. Measures for technical and managerial protection of personal
information
Eastar Jet handles the Users' privacy with technological and systematic
approaches to prevent loss, theft, leakages, alteration, and compromise and
to secure stability of the information as follows:
A. Encryption of personal information
User passwords are stored and managed by being encrypted in one way, and
identification and change of personal information can be carried out only
by a member who knows the passwords.
B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or
compromised by hacking or computer viruses. The information is regularly
backed up for data integrity and protected with the most up-to-date vaccine
programs. All personal information is safely encrypted and transferred on
the network.
Further, the company controls external access without permission by using a
system for blocking infringement and strives to use every possible
technical device to ensure security in other systems.
C. Minimization of employees in charge of processing personal information
and education for the employees
The Company limits the number of employees in charge of managing personal
information to a minimum and makes them recognize the importance of
personal information protection through managerial measures such as
education for staff members handling personal information.
D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected
by checking whether measures for protecting personal information are
implemented and staff members comply with regulations through the
in-company organization for protection of personal information.
12. Staff in charge of managing personal information and contact
numbers
Eastar Jet has designated relevant departments and staff members in charge
of managing personal information to protect customer information and deal
with complaints over the management of personal information.
Inquiry for personal information: Reservation Center 1544 - 0080
Staff in charge of managing personal information:
Name: Sanguk Kim
Email: [email protected]
Department in charge of managing personal information: Information Strategy Department
Email: [email protected]
For other reports or counseling on the breach of privacy, please contact
the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118
(http://privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee 1833-6972 (http://www.kopico.go.kr)
- Supreme Prosecutors' Office Cybercrime Investigation Department (without area code)1301 (http://spo.go.kr)
- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 ( http://cyber.go.kr )
13. Implementation of Personal Information Handling Policy and revised
contents (Duty of notification)
Eastar Jet complies with all applicable laws and regulations including Act
on Promotion of Information and Communications Network Utilization and
Information Protection, etc., Personal Information Protection Regulations,
Use and Protection of Credit Information Act, Framework Act on Electronic
Commerce, Guidelines for Consumer Protection in the Context of Electronic
Commerce, etc. In consequence, Eastar Jet's Personal Information Handling
Policy is subject to change at any time in accordance with applicable laws.
In case of the revision of the Personal Information Handling Policy, the
company shall announce the date, reasons and contents of the revision on
the website.
◈ Eastar Jet's revised Personal Information Handling Policy has been
effective since August 1, 2019.
Revision of Personal Information Handling Policy
- Personal Information Handling Policy Version : V2.7
- Date of revision for Personal Information Handling Policy : August 1, 2019
- Reasons of the revision for Personal Information Handling Policy : Change of personal information effective period system policy
-
Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar
Jet") considers the protection of users' personal information important and
complies with regulations for the protection of personal information in
relevant legislations such as "Personal Information Protection Act" and
"Act on Promotion of Information and Communications Network Utilization and
Information Protection, etc."
The Company informs how and for which purposes the Company uses personal
information offered by users and measures the Company takes to protect
personal information by notifying the following personal information
handling policy. The Company's Personal Information Handling Policy may
change depending on changes in legislation and announcement or the
Company's terms and conditions and internal policy; in cases of revision,
the Company notifies changes to users or posts changes on the service
screen.
Users are entitled to withhold consent for the collection, use, provision
and consignment of the following personal information. However, when users
withhold consent, whole or partial services cannot be used.
1. Purposes of personal information collection and use
Eastar Jet shall not use the personal information of the subject beyond the
scope this article describes except for cases the subject of personal
information agreed to or is defined by relevant laws.
A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline
tickets, delivery of various products such as airline tickets and souvenirs
and events, granting and reviewing qualification as best members, providing
customized services, verification of bank transactions and banking
services, purchase and collection of fees
B. Membership administration
Member verification regarding the membership service details, individual
identification, protection from misuse by delinquent members and protection
from unauthorized use, confirmation for the voluntary sign-up, limitation
of sign-up and number of sign-ups, record preservation for resolution of
the future dispute, complaints and requested issue handling, delivering of
notifications
C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized
services, service offering and advertisements according to the attributes
of demographic research, provision of information on products by the
company and affiliates, identification of access frequency, statistics
regarding the use of service by members, and delivering advertising
information and providing participation opportunity in the events. (User
personal information is not provided to individuals or groups which request
advertising.) Separate consent is required for use of personal information
for marketing and advertising purposes. Even when the user refuses to give
such consent, there will be no restrictions in the use of services.
D. Inquiries related promotion affiliation
Collection of information related to promotion and other marketing activities
2. Collected personal information
Eastar Jet collects the minimum personal information necessary to provide
services.
A. Membership on the website ( www.eastarjet.com)
|
Category
|
Items
|
|
Membership
|
Mandatory
|
Name, Date of Birth, Gender, e-mail, Password, Mobile phone number, ID, Nationality, country of residence, DI(Duplication Information)
|
|
Optional
|
Whether to receive/receiving event information, address, Recommended employee number
|
※ In the case of a subscription to preferred membership, "company name"
will also be collected.
B. Ticket reservation and payment by members and non-members
|
Category
|
Items
|
|
Domestic Lines
|
Mandatory
|
Reserved user information(Name, Contact number, e-mail), Primary passenger contact information, Information on a person on board(Name, Gender, Date of birth), Payment information (Credit card information, bank account information)
|
|
Optional
|
Applicable personal information when selecting the discount
|
|
International Lines
|
Mandatory
|
Reserved user information(Name, Contact number, e-mail), Primary passenger contact information, Information on a person on board(Name in English, Gender, Date of birth), Payment information (Credit card information, bank account information)
|
|
Optional
|
Passport Information on a person onboard(Nationality,
Passport number, passport expiration date, nation of passport issuance), Recommended employee number
|
C. Other services
|
Category
|
Items
|
| Login |
Member |
e-mail, ID, Password |
| Non-Member |
Ticket reservation number, Name, e-mail |
| Opinion from Clients |
Member |
Name, Contact number(Mobile phone number), e-mail |
| Non-Member |
Marketing
Alliance Inquiry |
Mandatory |
Name, Company Contact number, e-mail |
| Optional |
- |
| Group Booking |
Mandatory |
Name, Mobile phone number, Contact number, e-mail |
| Optional |
- |
D. The following information can be created and collected in the process of
using services or business
- Records of using services, Access log, Access IP, Payment records
E. In applying for an event
- ID, Name, Address, Gender, Date of Birth, Contact number (Mobile phone number or -email)
※ The personal information subject to collection may vary depending on the purpose and requirement of each event.
3. Consent to Transfer of Personal Information to a Third Party
Eastar Jet uses a user's personal information to the extent notified in
"Collection and Use of Personal Information." The Company does not use the
information beyond that extent nor provide a third party with personal
information without prior consent from the user. Exceptions to this are
made in exceptional circumstances, such as where the user has given prior
consent to the disclosure or provision of his or her personal information
to a third party. Easter Jet is also obligated to provide a user's personal
information in accordance with the law, or where a request has been made by
crime investigation agencies or supervisory authorities pursuant to the
procedure and methods of applicable laws for the purpose of crime
investigation or inspection. These cases, however, are exceptions.
|
Recipient Name
|
Recipient's Purpose of Using the Personal Information
|
Retention Period
|
Provided information
|
|
t'way Air
|
flights with codeshare service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Gender, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
|
Hong Kong Express Airway Limited
|
flights with interline service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Gender, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the
implementation of contracts and provision of services to external companies
as follows:
|
Category
|
Service entrusted
|
Entrusted company
|
Information provided Retention /Use Period
|
|
Website
|
Real name verification and identification
|
NICE Information Service Co., Ltd.
|
Until the purposes of using the personal information
are attained
|
|
Payment process for Eastar Jet's paid products and
services such as airline tickets
|
First Data Korea co., Ltd. KRP, KSNET, Korea
Financial Telecommunications & Clearings Institute,
econtext, NHN PAYCO Corp. , kakaopay corp.
|
|
Service Infra
|
Providing stable services for the internet reservation
system
|
ContentsBrdige, JS Information System Co., Ltd., Nexus Community, COMAS, Inc.
|
|
Reservation Center
|
Consultation on reservation and ticketing, providing
information and services on using air transport and
|
Good TM Co., Ltd.
|
|
Booking system
|
Providing services for air flights such as reservation
|
Navitaire Amadeus IT Group S.A.
|
|
Airport branch office
|
Tasks regarding reservation and transport such as
boarding procedure
|
Domestic - EASTARPORT Co., Ltd.
Overseas - Overseas associated company
▶ See Status of associated companies
|
▼ Status of associated companies(Ground Handling Company)
|
Region
|
Ground Handling Company
|
|
JAPAN
|
FMG INC.
|
|
Swissport Japan Ltd
|
|
Cast Co., Ltd
|
|
All Nippon Airways
|
|
THAILAND
|
Bangkok Flight Service Co.,Ltd
|
|
BANGKOK AIR GROUND HANDLING CO., LTD.
|
|
MALAYSIA
|
MALAYSIAN AIRLINE SYSTEM BERHAD
|
|
TAIWAN
|
EVA AIRWAYS CORPORATION
|
|
HONGKONG
|
Jardine Airport Services.,Ltd
|
|
VIETNAM
|
Hanoi Ground Services
|
|
Vietnam Airport Ground Services Company Limited
|
|
CHINA
|
SHE) ShenYang TaoXian International Airport
Co.,Ltd.(沈阳桃仙国际机场股份有限公司)
TAN) Jinan International Airport Co.,Ltd.(济南国际机场股份有限公司)
PVG) Shanghai International Airport Services
Co.,Ltd.(上海国际机场地面服务有限公司)
YNJ) Yanji chaoyangchun International Airport
DLC) Dalian Zhoushuizi Internatioinal Airport Co.,Ltd.
HRB) Heilongjiang Airport
NGB) Jinjiang quanzhou Internatioinal Airport Co.,Ltd.
JNI) Ningbo Airport & Logistics Development Group
Co.,Ltd.(宁波机场与物流发展集团有限公司)
|
5. Overseas Transfer of Personal Information
Eastar Jet will transfer personal information overseas as follows to
operate its reservation and transportation system. A user has the right to
refuse to consent to such overseas transfer of personal information. If a
user refuses to consent to overseas transfer of personal information,
however, then the purpose of such overseas transfer cannot be achieved.
Thus, there may be difficulties in the use of services.
| Information to be transferred |
Purpose of Use |
Transfer Date and Transfer Method |
Types of overseas transfer |
Items of Personal Information to be Transferred |
Staff in charge of managing information |
Period of Retention and Use by Recipient |
| NAVITAIRE LLC An Amadeus company (Australia) |
Operate Eastar Jet's reservation system and keep reservation records |
Transmission through public network for ticket reservation/payment, creation of membershipaccount, and updating account information(subjected to security protocol) |
Contracting (or outsourcing) of personal information processing and preservation of personal information |
Eastarjet Membership Number, ID, Password, DI(Duplication Information), Contact number(Mobile phone number, e-mail), Name, Gender, Date of birth, Information on card(Card Number, Card expiration date), Bank account number, transaction authentication number, transaction number, Passport Information(Nationality, Passport number, passport expiration date, nation of passport issuance), whether or not to receive information on events |
e-mail:
[email protected] |
Until the purposes of using the personal information are attained |
6. Period for possession and use of person information
Eastar Jet possesses and uses customers' personal information for the
period of providing services. When a user withdraws membership, the
collected personal information is immediately destroyed to prevent its use
or browsing of the information. However, when it is necessary to preserve
the information in accordance with applicable laws, the information is
preserved in accordance with such laws.
|
Applicable Personal Information
|
Related services
|
Reason for retention (Relevant laws)
|
Retention period
|
|
Records regarding contract or withdrawal of
subscription
|
Join Membership |
Article 6 of the Act on Consumer Protection in
Electronic Commerce, etc. and Article 6 of the
enforcement ordinance
|
5 years
|
|
Records regarding payments and provision of goods
|
Reservation, issuance and payment of flight tickets (including members/non-members)
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
5 years
|
|
Records regarding processing of consumer complaints or
conflicts
|
Opinion from customers
(including members/non-members)
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
3 years
|
|
Records regarding access
|
Login
|
Reason for retention: Article 15-2 of Protection of
Communications Secrets Act and Article 41 of the
enforcement ordinance
|
3 months
|
7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal
information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is
as follows:
A. Destruction process
- Any personal information entered by a user for purposes such as
membership subscription, after achievement of the purpose, will be
destroyed for reasons of information protection. This is done as prescribed
in Eastar Jet's internal policies and relevant laws.
- The aforementioned personal information, unless pursuant to relevant
laws, will not be used for any purpose other than that of
possessing the information.
B. Destruction method
- The personal information stored in the form of electronic file will be
deleted using a technique which makes it impossible for the deleted
information to be retrieved. The personal information printed on paper will
be destroyed by shredding or incineration.
C. Introduction of the personal information usage period system
- To protect the personal information of any person not using the service for a long period (1 year or longer), Eastar Jet shall classify those non-users as a dormant account from June 5, 2019, in a way to safely separate and retain the personal information.
Based on the final log-in date, the period of non-use (1 year) is calculated to separately keep the personal information of the non-users and the relevant contents shall be notified to the applicable user through e-mail and others at least one month in advance.
With the exception of cases with special provisions in the relevant laws and regulations, the applicable personal information shall not be used and provided.
In the event that the service of Eastar Jet is intended to be used continuously until it is converted into a dormant account, please log in to the web-site or mobile App of Eastar Jet.
8. Rights and duties of users and legal representatives and methods to
exercise
A. User and legal representatives with authority are entitled to browse and
modify a member's personal information on "MYPAGE" of the website of Eastar
Jet. When requests are made through e-mail or in writing to staff members
in charge of managing personal information, the Company browses, modifies
or deletes the information. ID, name and date of birth cannot be modified,
but it can be exceptionally approved to change a name due to a changed
name. Cases where deletion or modification is prohibited or limited in
accordance with other legislations can be limited for processing. Further,
when requests are made to modify errors in personal information, such
personal information is not used or provided until the modification is
completed unless provision of personal information is requested by other
legislations. If incorrect personal information is already provided, result
of modification is notified to a third party for modification.
B. Users and legal representatives are entitled to request the suspension
of processing personal information on the website of Eastar Jet whenever
they want. However, requests for suspension can be rejected in the
following cases:
1) When it is inevitable to reject requests due to special legal
regulations or compliance with legal duties
2) When it is possible to damage the life and body of others or infringe on
property and interests of others unfairly
3) When information holders do not express their willingness to cancel the
contract in cases where implementation of the contract cannot be conducted
such as when agreed services with information holders cannot be provided
unless personal information is processed
C. Members can withdraw agreed contents for collection, use and provision
of personal information with membership whenever they want. As for
withdrawal of consent, the Company takes necessary measures such as
deletion of personal information without delay when users click "Withdrawal
of membership" on the Company's website or contact staff members in charge
of managing personal information in writing, on the phone or by e-mail.
However, when the Company needs to preserve personal information of members
in accordance with regulations of terms and conditions, processing of
personal information can be limited. In such cases, members should notify
their IDs and identification information to identify personal information,
and some services are restricted or blocked due to withdrawal.
9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to
protect personal information of children below the age of 14, and the
Company does not collect children's personal information.
10. Installation, operation and rejection of devices to automatically
collect personal information
The Company can install and operate cookies, which store and find customer
information through provided Internet services. A cookie is character
string information which is stored by a web server on a web browser and is
sent for additional requests by the server. When customers access the
website of Eastar Jet, the Company can provide customers with services
without inputting additional information such as names by reading the
contents of the cookie and finding additional information.
A. Customer information which is collected through cookies can be used for
the following purposes:
1) Providing differentiated information depending on each sector of
personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours
for stay by members and non-members and identifying users' tastes and
interests;
3) Providing personal customized services for the next time of access by
tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer
habits
B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option >
Personal information > Advanced" at the upper part of web browser, give
notification in installing cookies or reject all cookies. However, when
customers reject installation of cookies, inconvenience or difficulties may
be caused in using or providing services.
C. Cookies are terminated when the browser is closed or users are logged
out.
11. Measures for technical and managerial protection of personal
information
Eastar Jet handles the Users' privacy with technological and systematic
approaches to prevent loss, theft, leakages, alteration, and compromise and
to secure stability of the information as follows:
A. Encryption of personal information
User passwords are stored and managed by being encrypted in one way, and
identification and change of personal information can be carried out only
by a member who knows the passwords.
B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or
compromised by hacking or computer viruses. The information is regularly
backed up for data integrity and protected with the most up-to-date vaccine
programs. All personal information is safely encrypted and transferred on
the network.
Further, the company controls external access without permission by using a
system for blocking infringement and strives to use every possible
technical device to ensure security in other systems.
C. Minimization of employees in charge of processing personal information
and education for the employees
The Company limits the number of employees in charge of managing personal
information to a minimum and makes them recognize the importance of
personal information protection through managerial measures such as
education for staff members handling personal information.
D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected
by checking whether measures for protecting personal information are
implemented and staff members comply with regulations through the
in-company organization for protection of personal information.
12. Staff in charge of managing personal information and contact
numbers
Eastar Jet has designated relevant departments and staff members in charge
of managing personal information to protect customer information and deal
with complaints over the management of personal information.
Inquiry for personal information: Reservation Center 1544 - 0080
Staff in charge of managing personal information:
Name: Sanguk Kim
Email: [email protected]
Department in charge of managing personal information: Information Strategy Department
Email: [email protected]
For other reports or counseling on the breach of privacy, please contact
the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118
(http://privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee 1833-6972 (http://www.kopico.go.kr)
- Supreme Prosecutors' Office Cybercrime Investigation Department (without area code)1301 (http://spo.go.kr)
- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 ( http://cyber.go.kr )
13. Implementation of Personal Information Handling Policy and revised
contents (Duty of notification)
Eastar Jet complies with all applicable laws and regulations including Act
on Promotion of Information and Communications Network Utilization and
Information Protection, etc., Personal Information Protection Regulations,
Use and Protection of Credit Information Act, Framework Act on Electronic
Commerce, Guidelines for Consumer Protection in the Context of Electronic
Commerce, etc. In consequence, Eastar Jet's Personal Information Handling
Policy is subject to change at any time in accordance with applicable laws.
In case of the revision of the Personal Information Handling Policy, the
company shall announce the date, reasons and contents of the revision on
the website.
◈ Eastar Jet's revised Personal Information Handling Policy has been
effective since June 20, 2019.
Revision of Personal Information Handling Policy
- Personal Information Handling Policy Version : V2.6
- Date of revision for Personal Information Handling Policy : June 20, 2019
- Reasons of the revision for Personal Information Handling Policy : Change of personal information effective period system policy and responsible person of personal information, update on the status of company consigned to process personal information
-
Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar
Jet") considers the protection of users' personal information important and
complies with regulations for the protection of personal information in
relevant legislations such as "Personal Information Protection Act" and
"Act on Promotion of Information and Communications Network Utilization and
Information Protection, etc."
The Company informs how and for which purposes the Company uses personal
information offered by users and measures the Company takes to protect
personal information by notifying the following personal information
handling policy. The Company's Personal Information Handling Policy may
change depending on changes in legislation and announcement or the
Company's terms and conditions and internal policy; in cases of revision,
the Company notifies changes to users or posts changes on the service
screen.
Users are entitled to withhold consent for the collection, use, provision
and consignment of the following personal information. However, when users
withhold consent, whole or partial services cannot be used.
1. Purposes of personal information collection and use
Eastar Jet shall not use the personal information of the subject beyond the
scope this article describes except for cases the subject of personal
information agreed to or is defined by relevant laws.
A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline
tickets, delivery of various products such as airline tickets and souvenirs
and events, granting and reviewing qualification as best members, providing
customized services, verification of bank transactions and banking
services, purchase and collection of fees
B. Membership administration
Member verification regarding the membership service details, individual
identification, protection from misuse by delinquent members and protection
from unauthorized use, confirmation for the voluntary sign-up, limitation
of sign-up and number of sign-ups, record preservation for resolution of
the future dispute, complaints and requested issue handling, delivering of
notifications
C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized
services, service offering and advertisements according to the attributes
of demographic research, provision of information on products by the
company and affiliates, identification of access frequency, statistics
regarding the use of service by members, and delivering advertising
information and providing participation opportunity in the events. (User
personal information is not provided to individuals or groups which request
advertising.) Separate consent is required for use of personal information
for marketing and advertising purposes. Even when the user refuses to give
such consent, there will be no restrictions in the use of services.
D. Inquiries related promotion affiliation
Collection of information related to promotion and other marketing activities
2. Collected personal information
Eastar Jet collects the minimum personal information necessary to provide
services.
A. Membership on the website ( www.eastarjet.com)
|
Category
|
Items
|
|
Membership
|
Mandatory
|
Name, Date of Birth, Gender, e-mail, Password, Mobile phone number, ID, Nationality, country of residence, DI(Duplication Information)
|
|
Optional
|
Whether to receive/receiving event information, address
|
※ In the case of a subscription to preferred membership, "company name"
will also be collected.
B. Ticket reservation and payment by members and non-members
|
Category
|
Items
|
|
Domestic Lines
|
Mandatory
|
Reserved user information(Name, Contact number, e-mail), Primary passenger contact information, Information on a person on board(Name, Gender, Date of birth), Payment information (Credit card information, bank account information)
|
|
Optional
|
Applicable personal information when selecting the discount
|
|
International Lines
|
Mandatory
|
Reserved user information(Name, Contact number, e-mail), Primary passenger contact information, Information on a person on board(Name in English, Gender, Date of birth), Payment information (Credit card information, bank account information)
|
|
Optional
|
Passport Information on a person onboard(Nationality,
Passport number, passport expiration date, nation of
passport issuance)
|
C. Other services
|
Category
|
Items
|
| Login |
Member |
e-mail, ID, Password |
| Non-Member |
Ticket reservation number, Name, e-mail |
| Opinion from Clients |
Member |
Name, Contact number(Mobile phone number), e-mail |
| Non-Member |
Marketing
Alliance Inquiry |
Mandatory |
Name, Company Contact number, e-mail |
| Optional |
- |
| Group Booking |
Mandatory |
Name, Mobile phone number, Contact number, e-mail |
| Optional |
- |
D. The following information can be created and collected in the process of
using services or business
- Records of using services, Access log, Access IP, Payment records
E. In applying for an event
- ID, Name, Address, Gender, Date of Birth, Contact number (Mobile phone number or -email)
※ The personal information subject to collection may vary depending on the purpose and requirement of each event.
3. Consent to Transfer of Personal Information to a Third Party
Eastar Jet uses a user's personal information to the extent notified in
"Collection and Use of Personal Information." The Company does not use the
information beyond that extent nor provide a third party with personal
information without prior consent from the user. Exceptions to this are
made in exceptional circumstances, such as where the user has given prior
consent to the disclosure or provision of his or her personal information
to a third party. Easter Jet is also obligated to provide a user's personal
information in accordance with the law, or where a request has been made by
crime investigation agencies or supervisory authorities pursuant to the
procedure and methods of applicable laws for the purpose of crime
investigation or inspection. These cases, however, are exceptions.
|
Recipient Name
|
Recipient's Purpose of Using the Personal Information
|
Retention Period
|
Provided information
|
|
t'way Air
|
flights with codeshare service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Gender, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
|
Hong Kong Express Airway Limited
|
flights with interline service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Gender, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the
implementation of contracts and provision of services to external companies
as follows:
|
Category
|
Service entrusted
|
Entrusted company
|
Information provided Retention /Use Period
|
|
Website
|
Real name verification and identification
|
NICE Information Service Co., Ltd.
|
Until the purposes of using the personal information
are attained
|
|
Payment process for Eastar Jet's paid products and
services such as airline tickets
|
First Data Korea co., Ltd. KRP, KSNET, Korea
Financial Telecommunications & Clearings Institute,
econtext, NHN PAYCO Corp. , kakaopay corp.
|
|
Service Infra
|
Providing stable services for the internet reservation
system
|
ContentsBrdige, JS Information System Co., Ltd., Nexus Community
|
|
Reservation Center
|
Consultation on reservation and ticketing, providing
information and services on using air transport and
|
Good TM Co., Ltd.
|
|
Booking system
|
Providing services for air flights such as reservation
|
Navitaire Amadeus IT Group S.A.
|
|
Airport branch office
|
Tasks regarding reservation and transport such as
boarding procedure
|
Domestic - EASTARPORT Co., Ltd.
Overseas - Overseas associated company
▶ See Status of associated companies
|
▼ Status of associated companies(Ground Handling Company)
|
Region
|
Ground Handling Company
|
|
JAPAN
|
FMG INC.
|
|
Swissport Japan Ltd
|
|
Cast Co., Ltd
|
|
All Nippon Airways
|
|
THAILAND
|
Bangkok Flight Service Co.,Ltd
|
|
BANGKOK AIR GROUND HANDLING CO., LTD.
|
|
MALAYSIA
|
MALAYSIAN AIRLINE SYSTEM BERHAD
|
|
TAIWAN
|
EVA AIRWAYS CORPORATION
|
|
HONGKONG
|
Jardine Airport Services.,Ltd
|
|
VIETNAM
|
Hanoi Ground Services
|
|
Vietnam Airport Ground Services Company Limited
|
|
CHINA
|
SHE) ShenYang TaoXian International Airport
Co.,Ltd.(沈阳桃仙国际机场股份有限公司)
TAN) Jinan International Airport Co.,Ltd.(济南国际机场股份有限公司)
PVG) Shanghai International Airport Services
Co.,Ltd.(上海国际机场地面服务有限公司)
YNJ) Yanji chaoyangchun International Airport
DLC) Dalian Zhoushuizi Internatioinal Airport Co.,Ltd.
HRB) Heilongjiang Airport
NGB) Jinjiang quanzhou Internatioinal Airport Co.,Ltd.
JNI) Ningbo Airport & Logistics Development Group
Co.,Ltd.(宁波机场与物流发展集团有限公司)
|
5. Overseas Transfer of Personal Information
Eastar Jet will transfer personal information overseas as follows to
operate its reservation and transportation system. A user has the right to
refuse to consent to such overseas transfer of personal information. If a
user refuses to consent to overseas transfer of personal information,
however, then the purpose of such overseas transfer cannot be achieved.
Thus, there may be difficulties in the use of services.
| Information to be transferred |
Purpose of Use |
Transfer Date and Transfer Method |
Types of overseas transfer |
Items of Personal Information to be Transferred |
Staff in charge of managing information |
Period of Retention and Use by Recipient |
| NAVITAIRE LLC An Amadeus company (Australia) |
Operate Eastar Jet's reservation system and keep reservation records |
Transmission through public network for ticket reservation/payment, creation of membershipaccount, and updating account information(subjected to security protocol) |
Contracting (or outsourcing) of personal information processing and preservation of personal information |
Eastarjet Membership Number, ID, Password, DI(Duplication Information), Contact number(Mobile phone number, e-mail), Name, Gender, Date of birth, Information on card(Card Number, Card expiration date), Bank account number, transaction authentication number, transaction number, Passport Information(Nationality, Passport number, passport expiration date, nation of passport issuance), whether or not to receive information on events |
e-mail:
[email protected] |
Until the purposes of using the personal information are attained |
6. Period for possession and use of person information
Eastar Jet possesses and uses customers' personal information for the
period of providing services. When a user withdraws membership, the
collected personal information is immediately destroyed to prevent its use
or browsing of the information. However, when it is necessary to preserve
the information in accordance with applicable laws, the information is
preserved in accordance with such laws.
|
Applicable Personal Information
|
Related services
|
Reason for retention (Relevant laws)
|
Retention period
|
|
Records regarding contract or withdrawal of
subscription
|
Join Membership |
Article 6 of the Act on Consumer Protection in
Electronic Commerce, etc. and Article 6 of the
enforcement ordinance
|
5 years
|
|
Records regarding payments and provision of goods
|
Reservation, issuance and payment of flight tickets (including members/non-members)
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
5 years
|
|
Records regarding processing of consumer complaints or
conflicts
|
Opinion from customers
(including members/non-members)
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
3 years
|
|
Records regarding access
|
Login
|
Reason for retention: Article 15-2 of Protection of
Communications Secrets Act and Article 41 of the
enforcement ordinance
|
3 months
|
7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal
information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is
as follows:
A. Destruction process
- Any personal information entered by a user for purposes such as
membership subscription, after achievement of the purpose, will be
destroyed for reasons of information protection. This is done as prescribed
in Eastar Jet's internal policies and relevant laws.
- The aforementioned personal information, unless pursuant to relevant
laws, will not be used for any purpose other than that of
possessing the information.
B. Destruction method
- The personal information stored in the form of electronic file will be
deleted using a technique which makes it impossible for the deleted
information to be retrieved. The personal information printed on paper will
be destroyed by shredding or incineration.
C. Introduction of the personal information usage period system
- Eastar Jet, to protect personal information of a long-term (1 year or
more) non-user of service, began to periodically destroy such non-service
user's personal information on August 18, 2015. The period of non-use of
service will be calculated based on the date of final log-in. The necessary
matters will be notified to the relevant users through emails, etc. at
least 1 month before the aforementioned personal information is destroyed.
8. Rights and duties of users and legal representatives and methods to
exercise
A. User and legal representatives with authority are entitled to browse and
modify a member's personal information on "MYPAGE" of the website of Eastar
Jet. When requests are made through e-mail or in writing to staff members
in charge of managing personal information, the Company browses, modifies
or deletes the information. ID, name and date of birth cannot be modified,
but it can be exceptionally approved to change a name due to a changed
name. Cases where deletion or modification is prohibited or limited in
accordance with other legislations can be limited for processing. Further,
when requests are made to modify errors in personal information, such
personal information is not used or provided until the modification is
completed unless provision of personal information is requested by other
legislations. If incorrect personal information is already provided, result
of modification is notified to a third party for modification.
B. Users and legal representatives are entitled to request the suspension
of processing personal information on the website of Eastar Jet whenever
they want. However, requests for suspension can be rejected in the
following cases:
1) When it is inevitable to reject requests due to special legal
regulations or compliance with legal duties
2) When it is possible to damage the life and body of others or infringe on
property and interests of others unfairly
3) When information holders do not express their willingness to cancel the
contract in cases where implementation of the contract cannot be conducted
such as when agreed services with information holders cannot be provided
unless personal information is processed
C. Members can withdraw agreed contents for collection, use and provision
of personal information with membership whenever they want. As for
withdrawal of consent, the Company takes necessary measures such as
deletion of personal information without delay when users click "Withdrawal
of membership" on the Company's website or contact staff members in charge
of managing personal information in writing, on the phone or by e-mail.
However, when the Company needs to preserve personal information of members
in accordance with regulations of terms and conditions, processing of
personal information can be limited. In such cases, members should notify
their IDs and identification information to identify personal information,
and some services are restricted or blocked due to withdrawal.
9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to
protect personal information of children below the age of 14, and the
Company does not collect children's personal information.
10. Installation, operation and rejection of devices to automatically
collect personal information
The Company can install and operate cookies, which store and find customer
information through provided Internet services. A cookie is character
string information which is stored by a web server on a web browser and is
sent for additional requests by the server. When customers access the
website of Eastar Jet, the Company can provide customers with services
without inputting additional information such as names by reading the
contents of the cookie and finding additional information.
A. Customer information which is collected through cookies can be used for
the following purposes:
1) Providing differentiated information depending on each sector of
personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours
for stay by members and non-members and identifying users' tastes and
interests;
3) Providing personal customized services for the next time of access by
tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer
habits
B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option >
Personal information > Advanced" at the upper part of web browser, give
notification in installing cookies or reject all cookies. However, when
customers reject installation of cookies, inconvenience or difficulties may
be caused in using or providing services.
C. Cookies are terminated when the browser is closed or users are logged
out.
11. Measures for technical and managerial protection of personal
information
Eastar Jet handles the Users' privacy with technological and systematic
approaches to prevent loss, theft, leakages, alteration, and compromise and
to secure stability of the information as follows:
A. Encryption of personal information
User passwords are stored and managed by being encrypted in one way, and
identification and change of personal information can be carried out only
by a member who knows the passwords.
B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or
compromised by hacking or computer viruses. The information is regularly
backed up for data integrity and protected with the most up-to-date vaccine
programs. All personal information is safely encrypted and transferred on
the network.
Further, the company controls external access without permission by using a
system for blocking infringement and strives to use every possible
technical device to ensure security in other systems.
C. Minimization of employees in charge of processing personal information
and education for the employees
The Company limits the number of employees in charge of managing personal
information to a minimum and makes them recognize the importance of
personal information protection through managerial measures such as
education for staff members handling personal information.
D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected
by checking whether measures for protecting personal information are
implemented and staff members comply with regulations through the
in-company organization for protection of personal information.
12. Staff in charge of managing personal information and contact
numbers
Eastar Jet has designated relevant departments and staff members in charge
of managing personal information to protect customer information and deal
with complaints over the management of personal information.
Inquiry for personal information: Reservation Center 1544 - 0080
Staff in charge of managing personal information:
Name: Sooji Lee
Email: [email protected]
Department in charge of managing personal information: Information Technology Team
Email: [email protected]
For other reports or counseling on the breach of privacy, please contact
the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118
(http://privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee 1833-6972 (http://www.kopico.go.kr)
- Supreme Prosecutors' Office Cybercrime Investigation Department (without area code)1301 (http://spo.go.kr)
- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 (
http://cyberbureau.police.go.kr
)
13. Implementation of Personal Information Handling Policy and revised
contents (Duty of notification)
Eastar Jet complies with all applicable laws and regulations including Act
on Promotion of Information and Communications Network Utilization and
Information Protection, etc., Personal Information Protection Regulations,
Use and Protection of Credit Information Act, Framework Act on Electronic
Commerce, Guidelines for Consumer Protection in the Context of Electronic
Commerce, etc. In consequence, Eastar Jet's Personal Information Handling
Policy is subject to change at any time in accordance with applicable laws.
In case of the revision of the Personal Information Handling Policy, the
company shall announce the date, reasons and contents of the revision on
the website.
◈ Eastar Jet's revised Personal Information Handling Policy has been
effective since January 14, 2019.
Revision of Personal Information Handling Policy
- Personal Information Handling Policy Version : V2.5
- Date of revision for Personal Information Handling Policy : January 14, 2019
- Reasons of the revision for Personal Information Handling Policy : Update of information about contractors/relatedorganizations and personal information items for collection
-
Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar
Jet") considers the protection of users' personal information important and
complies with regulations for the protection of personal information in
relevant legislations such as "Personal Information Protection Act" and
"Act on Promotion of Information and Communications Network Utilization and
Information Protection, etc."
The Company informs how and for which purposes the Company uses personal
information offered by users and measures the Company takes to protect
personal information by notifying the following personal information
handling policy. The Company's Personal Information Handling Policy may
change depending on changes in legislation and announcement or the
Company's terms and conditions and internal policy; in cases of revision,
the Company notifies changes to users or posts changes on the service
screen.
Users are entitled to withhold consent for the collection, use, provision
and consignment of the following personal information. However, when users
withhold consent, whole or partial services cannot be used.
1. Purposes of personal information collection and use
Eastar Jet shall not use the personal information of the subject beyond the
scope this article describes except for cases the subject of personal
information agreed to or is defined by relevant laws.
A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline
tickets, delivery of various products such as airline tickets and souvenirs
and events, granting and reviewing qualification as best members, providing
customized services, verification of bank transactions and banking
services, purchase and collection of fees
B. Membership administration
Member verification regarding the membership service details, individual
identification, protection from misuse by delinquent members and protection
from unauthorized use, confirmation for the voluntary sign-up, limitation
of sign-up and number of sign-ups, record preservation for resolution of
the future dispute, complaints and requested issue handling, delivering of
notifications
C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized
services, service offering and advertisements according to the attributes
of demographic research, provision of information on products by the
company and affiliates, identification of access frequency, statistics
regarding the use of service by members, and delivering advertising
information and providing participation opportunity in the events. (User
personal information is not provided to individuals or groups which request
advertising.) Separate consent is required for use of personal information
for marketing and advertising purposes. Even when the user refuses to give
such consent, there will be no restrictions in the use of services.
D. Inquiries related promotion affiliation
Collection of information related to promotion and other marketing activities
2. Collected personal information
Eastar Jet collects the minimum personal information necessary to provide
services.
A. Membership on the website ( www.eastarjet.com)
|
Category
|
Items
|
|
Membership
|
Mandatory
|
Name, Date of Birth, Gender, e-mail, Password, Mobile phone number, address, Retention period
|
|
Optional
|
Whether to receive/receiving event information
|
※ In the case of a subscription to preferred membership, "company name"
will also be collected.
B. Ticket reservation and payment by members and non-members
|
Category
|
Items
|
|
Domestic Lines
|
Mandatory
|
Reserved user information(Name, Contact number, e-mail), Primary passenger contact information, Information on a person on board(Name, Gender, Date of birth), Payment information (Credit card information, bank account information)
|
|
Optional
|
Receiving information on events, Applicable personal
information when selecting the discount
|
|
International Lines
|
Mandatory
|
Reserved user information(Name, Contact number, e-mail), Primary passenger contact information, Information on a person on board(Name in English, Gender, Date of birth), Payment information (Credit card information, bank account information)
|
|
Optional
|
Passport Information on a person onboard(Nationality,
Passport number, passport expiration date, nation of
passport issuance)
|
C. Other services
|
Category
|
Items
|
| Login |
Member |
e-mail, ID, Password |
| Non-Member |
Ticket reservation number, Name, e-mail |
| Opinion from Clients |
Member |
Name, Contact number(Mobile phone number), e-mail |
| Non-Member |
Marketing
Alliance Inquiry |
Mandatory |
Name, Company Contact number, e-mail |
| Optional |
- |
| Group Booking |
Mandatory |
Name, Mobile phone number, Contact number, e-mail |
| Optional |
- |
D. The following information can be created and collected in the process of
using services or business
- Records of using services, Access log, Access IP, Payment records
E. In applying for an event
- ID, Name, Address, Gender, Date of Birth, Contact number (Mobile phone number or -email)
※ The personal information subject to collection may vary depending on the purpose and requirement of each event.
3. Consent to Transfer of Personal Information to a Third Party
Eastar Jet uses a user's personal information to the extent notified in
"Collection and Use of Personal Information." The Company does not use the
information beyond that extent nor provide a third party with personal
information without prior consent from the user. Exceptions to this are
made in exceptional circumstances, such as where the user has given prior
consent to the disclosure or provision of his or her personal information
to a third party. Easter Jet is also obligated to provide a user's personal
information in accordance with the law, or where a request has been made by
crime investigation agencies or supervisory authorities pursuant to the
procedure and methods of applicable laws for the purpose of crime
investigation or inspection. These cases, however, are exceptions.
|
Recipient Name
|
Recipient's Purpose of Using the Personal Information
|
Retention Period
|
Provided information
|
|
t'way Air
|
flights with codeshare service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Gender, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
|
Hong Kong Express Airway Limited
|
flights with interline service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Gender, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the
implementation of contracts and provision of services to external companies
as follows:
|
Category
|
Service entrusted
|
Entrusted company
|
Information provided Retention /Use Period
|
|
Website
|
Real name verification and identification
|
NICE Information Service Co., Ltd.
|
Until the purposes of using the personal information
are attained
|
|
Payment process for Eastar Jet's paid products and
services such as airline tickets
|
First Data Korea co., Ltd. KRP, KSNET, Korea
Financial Telecommunications & Clearings Institute,
econtext, PAYCO
|
|
Service Infra
|
Providing stable services for the internet reservation
system
|
ContentsBrdige, JS Information System Co., Ltd., Nexus Community
|
|
Reservation Center
|
Consultation on reservation and ticketing, providing
information and services on using air transport and
|
Good TM Co., Ltd.
|
|
Booking system
|
Providing services for air flights such as reservation
|
Navitaire Amadeus IT Group S.A.
|
|
Airport branch office
|
Tasks regarding reservation and transport such as
boarding procedure
|
Domestic - EASTARPORT Co., Ltd.
Overseas - Overseas associated company
▶ See Status of associated companies
|
▼ Status of associated companies(Ground Handling Company)
|
Region
|
Ground Handling Company
|
|
JAPAN
|
FMG INC.
|
|
Swissport Japan Ltd
|
|
Cast Co., Ltd
|
|
All Nippon Airways
|
|
THAILAND
|
Bangkok Flight Service Co.,Ltd
|
|
BANGKOK AIR GROUND HANDLING CO., LTD.
|
|
MALAYSIA
|
MALAYSIAN AIRLINE SYSTEM BERHAD
|
|
TAIWAN
|
EVA AIRWAYS CORPORATION
|
|
HONGKONG
|
Jardine Airport Services.,Ltd
|
|
VIETNAM
|
Hanoi Ground Services
|
|
Vietnam Airport Ground Services Company Limited
|
|
CHINA
|
SHE) ShenYang TaoXian International Airport
Co.,Ltd.(沈阳桃仙国际机场股份有限公司)
TAN) Jinan International Airport Co.,Ltd.(济南国际机场股份有限公司)
PVG) Shanghai International Airport Services
Co.,Ltd.(上海国际机场地面服务有限公司)
YNJ) Yanji chaoyangchun International Airport
DLC) Dalian Zhoushuizi Internatioinal Airport Co.,Ltd.
HRB) Heilongjiang Airport
NGB) Jinjiang quanzhou Internatioinal Airport Co.,Ltd.
JNI) Ningbo Airport & Logistics Development Group
Co.,Ltd.(宁波机场与物流发展集团有限公司)
|
5. Overseas Transfer of Personal Information
Eastar Jet will transfer personal information overseas as follows to
operate its reservation and transportation system. A user has the right to
refuse to consent to such overseas transfer of personal information. If a
user refuses to consent to overseas transfer of personal information,
however, then the purpose of such overseas transfer cannot be achieved.
Thus, there may be difficulties in the use of services.
| Information to be transferred |
Purpose of Use |
Transfer Date and Transfer Method |
Types of overseas transfer |
Items of Personal Information to be Transferred |
Staff in charge of managing information |
Period of Retention and Use by Recipient |
| NAVITAIRE LLC An Amadeus company (Australia) |
Operate Eastar Jet's reservation system and keep reservation records |
In the case of membership subscription, transmit via a public network(subjected to security protocol) |
Contracting (or outsourcing) of personal information processing and preservation of personal information |
Eastarjet Membership Number, ID, Password, DI(Duplication Information), Contact number(Mobile phone number, e-mail), Name, Gender, Date of birth, Information on card(Card Number, Card expiration date), Bank account number, transaction authentication number, transaction number, Passport Information(Nationality, Passport number, passport expiration date, nation of passport issuance), whether or not to receive information on events |
e-mail:
[email protected] |
Until the purposes of using the personal information are attained |
6. Period for possession and use of person information
Eastar Jet possesses and uses customers' personal information for the
period of providing services. When a user withdraws membership, the
collected personal information is immediately destroyed to prevent its use
or browsing of the information. However, when it is necessary to preserve
the information in accordance with applicable laws, the information is
preserved in accordance with such laws.
|
Applicable Personal Information
|
Related services
|
Reason for retention (Relevant laws)
|
Retention period
|
|
Records regarding contract or withdrawal of
subscription
|
Join Membership |
Article 6 of the Act on Consumer Protection in
Electronic Commerce, etc. and Article 6 of the
enforcement ordinance
|
5 years
|
|
Records regarding payments and provision of goods
|
Reservation, issuance and payment of flight tickets (including members/non-members)
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
5 years
|
|
Records regarding processing of consumer complaints or
conflicts
|
Opinion from customers
(including members/non-members)
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
3 years
|
|
Records regarding access
|
Login
|
Reason for retention: Article 15-2 of Protection of
Communications Secrets Act and Article 41 of the
enforcement ordinance
|
3 months
|
7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal
information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is
as follows:
A. Destruction process
- Any personal information entered by a user for purposes such as
membership subscription, after achievement of the purpose, will be
destroyed for reasons of information protection. This is done as prescribed
in Eastar Jet's internal policies and relevant laws.
- The aforementioned personal information, unless pursuant to relevant
laws, will not be used for any purpose other than that of
possessing the information.
B. Destruction method
- The personal information stored in the form of electronic file will be
deleted using a technique which makes it impossible for the deleted
information to be retrieved. The personal information printed on paper will
be destroyed by shredding or incineration.
C. Introduction of the personal information usage period system
- Eastar Jet, to protect personal information of a long-term (1 year or
more) non-user of service, began to periodically destroy such non-service
user's personal information on August 18, 2015. The period of non-use of
service will be calculated based on the date of final log-in. The necessary
matters will be notified to the relevant users through emails, etc. at
least 1 month before the aforementioned personal information is destroyed.
8. Rights and duties of users and legal representatives and methods to
exercise
A. User and legal representatives with authority are entitled to browse and
modify a member's personal information on "MYPAGE" of the website of Eastar
Jet. When requests are made through e-mail or in writing to staff members
in charge of managing personal information, the Company browses, modifies
or deletes the information. ID, name and date of birth cannot be modified,
but it can be exceptionally approved to change a name due to a changed
name. Cases where deletion or modification is prohibited or limited in
accordance with other legislations can be limited for processing. Further,
when requests are made to modify errors in personal information, such
personal information is not used or provided until the modification is
completed unless provision of personal information is requested by other
legislations. If incorrect personal information is already provided, result
of modification is notified to a third party for modification.
B. Users and legal representatives are entitled to request the suspension
of processing personal information on the website of Eastar Jet whenever
they want. However, requests for suspension can be rejected in the
following cases:
1) When it is inevitable to reject requests due to special legal
regulations or compliance with legal duties
2) When it is possible to damage the life and body of others or infringe on
property and interests of others unfairly
3) When information holders do not express their willingness to cancel the
contract in cases where implementation of the contract cannot be conducted
such as when agreed services with information holders cannot be provided
unless personal information is processed
C. Members can withdraw agreed contents for collection, use and provision
of personal information with membership whenever they want. As for
withdrawal of consent, the Company takes necessary measures such as
deletion of personal information without delay when users click "Withdrawal
of membership" on the Company's website or contact staff members in charge
of managing personal information in writing, on the phone or by e-mail.
However, when the Company needs to preserve personal information of members
in accordance with regulations of terms and conditions, processing of
personal information can be limited. In such cases, members should notify
their IDs and identification information to identify personal information,
and some services are restricted or blocked due to withdrawal.
9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to
protect personal information of children below the age of 14, and the
Company does not collect children's personal information.
10. Installation, operation and rejection of devices to automatically
collect personal information
The Company can install and operate cookies, which store and find customer
information through provided Internet services. A cookie is character
string information which is stored by a web server on a web browser and is
sent for additional requests by the server. When customers access the
website of Eastar Jet, the Company can provide customers with services
without inputting additional information such as names by reading the
contents of the cookie and finding additional information.
A. Customer information which is collected through cookies can be used for
the following purposes:
1) Providing differentiated information depending on each sector of
personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours
for stay by members and non-members and identifying users' tastes and
interests;
3) Providing personal customized services for the next time of access by
tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer
habits
B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option >
Personal information > Advanced" at the upper part of web browser, give
notification in installing cookies or reject all cookies. However, when
customers reject installation of cookies, inconvenience or difficulties may
be caused in using or providing services.
C. Cookies are terminated when the browser is closed or users are logged
out.
11. Measures for technical and managerial protection of personal
information
Eastar Jet handles the Users' privacy with technological and systematic
approaches to prevent loss, theft, leakages, alteration, and compromise and
to secure stability of the information as follows:
A. Encryption of personal information
User passwords are stored and managed by being encrypted in one way, and
identification and change of personal information can be carried out only
by a member who knows the passwords.
B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or
compromised by hacking or computer viruses. The information is regularly
backed up for data integrity and protected with the most up-to-date vaccine
programs. All personal information is safely encrypted and transferred on
the network.
Further, the company controls external access without permission by using a
system for blocking infringement and strives to use every possible
technical device to ensure security in other systems.
C. Minimization of employees in charge of processing personal information
and education for the employees
The Company limits the number of employees in charge of managing personal
information to a minimum and makes them recognize the importance of
personal information protection through managerial measures such as
education for staff members handling personal information.
D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected
by checking whether measures for protecting personal information are
implemented and staff members comply with regulations through the
in-company organization for protection of personal information.
12. Staff in charge of managing personal information and contact
numbers
Eastar Jet has designated relevant departments and staff members in charge
of managing personal information to protect customer information and deal
with complaints over the management of personal information.
Inquiry for personal information: Reservation Center 1544 - 0080
Staff in charge of managing personal information:
Name: Park Jong-tae, Team Leader of Information Technology Team
Email: [email protected]
Department in charge of managing personal information: Information Technology Team
Email: [email protected]
For other reports or counseling on the breach of privacy, please contact
the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118
(http://privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee 1833-6972 (http://www.kopico.go.kr)
- Supreme Prosecutors' Office Cybercrime Investigation Department +82-2-3480-2000 (http://spo.go.kr)
- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 (
http://cyber.go.kr
)
13. Implementation of Personal Information Handling Policy and revised
contents (Duty of notification)
Eastar Jet complies with all applicable laws and regulations including Act
on Promotion of Information and Communications Network Utilization and
Information Protection, etc., Personal Information Protection Regulations,
Use and Protection of Credit Information Act, Framework Act on Electronic
Commerce, Guidelines for Consumer Protection in the Context of Electronic
Commerce, etc. In consequence, Eastar Jet's Personal Information Handling
Policy is subject to change at any time in accordance with applicable laws.
In case of the revision of the Personal Information Handling Policy, the
company shall announce the date, reasons and contents of the revision on
the website.
◈ Eastar Jet's revised Personal Information Handling Policy has been
effective since February 12, 2018.
Revision of Personal Information Handling Policy
- Personal Information Handling Policy Version : V2.4
- Date of revision for Personal Information Handling Policy : February 12, 2018
- Reasons of the revision for Personal Information Handling Policy : Updating Personal Information Handling
-
Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar
Jet") considers the protection of users' personal information important and
complies with regulations for the protection of personal information in
relevant legislations such as "Personal Information Protection Act" and
"Act on Promotion of Information and Communications Network Utilization and
Information Protection, etc."
The Company informs how and for which purposes the Company uses personal
information offered by users and measures the Company takes to protect
personal information by notifying the following personal information
handling policy. The Company's Personal Information Handling Policy may
change depending on changes in legislation and announcement or the
Company's terms and conditions and internal policy; in cases of revision,
the Company notifies changes to users or posts changes on the service
screen.
Users are entitled to withhold consent for the collection, use, provision
and consignment of the following personal information. However, when users
withhold consent, whole or partial services cannot be used.
1. Purposes of personal information collection and use
Eastar Jet shall not use the personal information of the subject beyond the
scope this article describes except for cases the subject of personal
information agreed to or is defined by relevant laws.
A. Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline
tickets, delivery of various products such as airline tickets and souvenirs
and events, granting and reviewing qualification as best members, providing
customized services, verification of bank transactions and banking
services, purchase and collection of fees
B. Membership administration
Member verification regarding the membership service details, individual
identification, protection from misuse by delinquent members and protection
from unauthorized use, confirmation for the voluntary sign-up, limitation
of sign-up and number of sign-ups, record preservation for resolution of
the future dispute, complaints and requested issue handling, delivering of
notifications
C. Use in the marketing and advertisement
Development and specialization of new services, provision of customized
services, service offering and advertisements according to the attributes
of demographic research, provision of information on products by the
company and affiliates, identification of access frequency, statistics
regarding the use of service by members, and delivering advertising
information and providing participation opportunity in the events. (User
personal information is not provided to individuals or groups which request
advertising.) Separate consent is required for use of personal information
for marketing and advertising purposes. Even when the user refuses to give
such consent, there will be no restrictions in the use of services.
2. Collected personal information
Eastar Jet collects the minimum personal information necessary to provide
services.
A. Membership on the website ( www.eastarjet.com)
|
Category
|
Items
|
|
Membership
|
Mandatory
|
Name, Sex, e-mail, Password, Mobile phone number,
Retention period
|
|
Optional
|
Receiving information such as events
|
※ In the case of a subscription to preferred membership, "company name"
will also be collected.
B. In using services
|
Category
|
Items
|
|
Domestic Lines
|
Mandatory
|
Reserved user information(Name, Contact number,
e-mail), Information on a person on board(Name, Sex,
Date of birth), Payment information (Credit card
information, bank account information)
|
|
Optional
|
Receiving information on events, Applicable personal
information when selecting the discount
|
|
International Lines
|
Mandatory
|
Reserved user information(Name, Contact number,
e-mail), Information on a person on board(Name in
English, Sex, Date of birth), Payment information
(Credit card information, bank account information)
|
|
Optional
|
Passport Information on a person onboard(Nationality,
Passport number, passport expiration date, nation of
passport issuance)
|
C. The following information can be created and collected in the process of
using services or business
- Records of using services, Access log, Access IP, Payment records
D. In applying for an event
- ID, Name, Address, Sex, Date of Birth, Contact number (Mobile phone
number or -email)
3. Consent to Transfer of Personal Information to a Third Party
Eastar Jet uses a user's personal information to the extent notified in
"Collection and Use of Personal Information." The Company does not use the
information beyond that extent nor provide a third party with personal
information without prior consent from the user. Exceptions to this are
made in exceptional circumstances, such as where the user has given prior
consent to the disclosure or provision of his or her personal information
to a third party. Easter Jet is also obligated to provide a user's personal
information in accordance with the law, or where a request has been made by
crime investigation agencies or supervisory authorities pursuant to the
procedure and methods of applicable laws for the purpose of crime
investigation or inspection. These cases, however, are exceptions.
|
Recipient Name
|
Recipient's Purpose of Using the Personal Information
|
Retention Period
|
Provided information
|
|
t'way Air
|
flights with codeshare service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Sex, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
|
Hong Kong Express Airway Limited
|
flights with interline service
|
until the affiliated service is closed
|
Information on a person on board(Name in Korean and
English, Sex, Date of birth), Passport Information on a
person onboard(Nationality, Passport number, passport
expiration date, nation of passport issuance)
|
4. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the
implementation of contracts and provision of services to external companies
as follows:
|
Category
|
Service entrusted
|
Entrusted company
|
Information provided Retention /Use Period
|
|
Website
|
Real name verification and identification
|
NICE Information Service Co., Ltd.
|
Until the purposes of using the personal information
are attained
|
|
Payment process for Eastar Jet's paid products and
services such as airline tickets
|
First Data Korea co., Ltd. KRP, KSNET, VP Inc., Korea
Financial Telecommunications & Clearings Institute,
econtext
|
|
Service Infra
|
Providing stable services for the internet reservation
system
|
ContentsBrdige, Hangilwit INC., Nexus Community
|
|
Reservation Center
|
Consultation on reservation and ticketing, providing
information and services on using air transport and
|
Good TM Co., Ltd.
|
|
Booking system
|
Providing services for air flights such as reservation
|
Navitaire Amadeus IT Group S.A.
|
|
Airport branch office
|
Tasks regarding reservation and transport such as
boarding procedure
|
Domestic - EASTARPORT Co., Ltd.
Overseas - Overseas associated company
▶ See Status of associated companies
|
▼ Status of associated companies(Ground Handling Company)
|
Region
|
Ground Handling Company
|
|
JAPAN
|
FMG INC.
|
|
Swissport Japan Ltd
|
|
All Nippon Airways
|
|
THAILAND
|
Bangkok Flight Service Co.,Ltd
|
|
BANGKOK AIR GROUND HANDLING CO., LTD.
|
|
MALAYSIA
|
MALAYSIAN AIRLINE SYSTEM BERHAD
|
|
CAMBODIA
|
Societe Concessionnaire De L'Aeroport
|
|
TAIWAN
|
EVA AIRWAYS CORPORATION
|
|
HONGKONG
|
Jardine Airport Services.,Ltd
|
|
VIETNAM
|
Hanoi Ground Services
|
|
USA(Saipan)
|
Pacific Oriental, Inc.
|
|
CHINA
|
ShenYang TaoXian International Airport
Co.,Ltd.(沈阳桃仙国际机场股份有限公司)
Jinan International Airport Co.,Ltd.(济南国际机场股份有限公司)
Shanghai International Airport Services
Co.,Ltd.(上海国际机场地面服务有限公司)
Jilin Civil Aviation Airport Group Ynaji Airport
Co.,Ltd.(吉林省民航机场集团延吉机场公司)
Haerbin Taiping International Airport
Co.,Ltd.(哈尔滨太平国际机场股份有限公司)
Dalian International Airport Co.,Ltd.(大连国际机场股份有限公司)
Ningbo Airport & Logistics Development Group
Co.,Ltd.(宁波机场与物流发展集团有限公司)
|
5. Overseas Transfer of Personal Information
Eastar Jet will transfer personal information overseas as follows to
operate its reservation and transportation system. A user has the right to
refuse to consent to such overseas transfer of personal information. If a
user refuses to consent to overseas transfer of personal information,
however, then the purpose of such overseas transfer cannot be achieved.
Thus, there may be difficulties in the use of services.
A. NAVITAIRE LLC An Amadeus company (Australia)
1) Purpose of Use
- Operate Eastar Jet's reservation system and keep reservation records
2) Transfer Date and Transfer Method
- In the case of membership subscription, transmit via a public network (subjected to security protocol)
3) Types of overseas transfer
- Contracting (or outsourcing) of personal information processing and
preservation of personal information
4) Items of Personal Information to be Transferred
- Eastarjet Membership Number, ID, Password, DI(Duplication Information),
Contact number(Mobile phone number, e-mail), Name, Sex, Date of birth,
Information on card(Card Number, Card expiration date), Bank account
number, transaction authentication number, transaction number, Passport
Information(Nationality, Passport number, passport expiration date, nation
of passport issuance), whether or not to receive information on events
5) Staff in charge of managing information
- e-mail: [email protected]
6) Period of Retention and Use by Recipient
- Until the purposes of using the personal information are attained
B. Amazon Web Services, Inc. (Japan)
1) Purpose of Use
- Provide the Global Cloud service to operate Eastar Jet's Internet
reservation system
2) Transfer Date and Transfer Method
- In the case of membership subscription, promptly transfer to the data
server in Amazon Web Services' Tokyo through a
security-reinforced private network
3) Types of overseas transfer
- Preserve personal Information
4) Items of Personal Information to be Transferred
- Eastar jet Membership Number, ID, Password, DI(Duplication Information),
Contact number(Mobile phone number, e-mail), Name, Sex, Date of birth,
Information on card(Card Number, Card expiration date), Bank account
number, transaction authentication number, transaction number, Passport
Information(Nationality, Passport number, passport expiration date, nation
of passport issuance), whether or not to receive information on events
5) Staff in charge of managing information
- Address : 410 Terry Ave North Seattle, WA 98109-5210 USA
- FAX : +1-206-266-7010
6) Period of Retention and Use by Recipient
- Until the purposes of using the personal information are attained
6. Period for possession and use of person information
Eastar Jet possesses and uses customers' personal information for the
period of providing services. When a user withdraws membership, the
collected personal information is immediately destroyed to prevent its use
or browsing of the information. However, when it is necessary to preserve
the information in accordance with applicable laws, the information is
preserved in accordance with such laws.
|
Applicable Personal Information
|
Reason for retention (Relevant laws)
|
Retention period
|
|
Records regarding contract or withdrawal of
subscription
|
Article 6 of the Act on Consumer Protection in
Electronic Commerce, etc. and Article 6 of the
enforcement ordinance
|
5 years
|
|
Records regarding payments and provision of goods
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
5 years
|
|
Records regarding processing of consumer complaints or
conflicts
|
Reason for retention: Article 6 of the Act on Consumer
Protection in Electronic Commerce, etc. and Article 6
of the enforcement ordinance
|
3 years
|
|
Records regarding access
|
Reason for retention: Article 15-2 of Protection of
Communications Secrets Act and Article 41 of the
enforcement ordinance
|
3 months
|
7. Procedure for the disposal of personal information
In principle, Eastar Jet will immediately destroy the collected personal
information when the purpose of collecting and using personal information is accomplished. The process and method of destruction is
as follows:
A. Destruction process
- Any personal information entered by a user for purposes such as
membership subscription, after achievement of the purpose, will be
destroyed for reasons of information protection. This is done as prescribed
in Eastar Jet's internal policies and relevant laws.
- The aforementioned personal information, unless pursuant to relevant
laws, will not be used for any purpose other than that of
possessing the information.
B. Destruction method
- The personal information stored in the form of electronic file will be
deleted using a technique which makes it impossible for the deleted
information to be retrieved. The personal information printed on paper will
be destroyed by shredding or incineration.
C. Introduction of the personal information usage period system
- Eastar Jet, to protect personal information of a long-term (1 year or
more) non-user of service, began to periodically destroy such non-service
user's personal information on August 18, 2015. The period of non-use of
service will be calculated based on the date of final log-in. The necessary
matters will be notified to the relevant users through emails, etc. at
least 1 month before the aforementioned personal information is destroyed.
8. Rights and duties of users and legal representatives and methods to
exercise
A. User and legal representatives with authority are entitled to browse and
modify a member's personal information on "MYPAGE" of the website of Eastar
Jet. When requests are made through e-mail or in writing to staff members
in charge of managing personal information, the Company browses, modifies
or deletes the information. ID, name and date of birth cannot be modified,
but it can be exceptionally approved to change a name due to a changed
name. Cases where deletion or modification is prohibited or limited in
accordance with other legislations can be limited for processing. Further,
when requests are made to modify errors in personal information, such
personal information is not used or provided until the modification is
completed unless provision of personal information is requested by other
legislations. If incorrect personal information is already provided, result
of modification is notified to a third party for modification.
B. Users and legal representatives are entitled to request the suspension
of processing personal information on the website of Eastar Jet whenever
they want. However, requests for suspension can be rejected in the
following cases:
1) When it is inevitable to reject requests due to special legal
regulations or compliance with legal duties
2) When it is possible to damage the life and body of others or infringe on
property and interests of others unfairly
3) When information holders do not express their willingness to cancel the
contract in cases where implementation of the contract cannot be conducted
such as when agreed services with information holders cannot be provided
unless personal information is processed
C. Members can withdraw agreed contents for collection, use and provision
of personal information with membership whenever they want. As for
withdrawal of consent, the Company takes necessary measures such as
deletion of personal information without delay when users click "Withdrawal
of membership" on the Company's website or contact staff members in charge
of managing personal information in writing, on the phone or by e-mail.
However, when the Company needs to preserve personal information of members
in accordance with regulations of terms and conditions, processing of
personal information can be limited. In such cases, members should notify
their IDs and identification information to identify personal information,
and some services are restricted or blocked due to withdrawal.
9. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to
protect personal information of children below the age of 14, and the
Company does not collect children's personal information.
10. Installation, operation and rejection of devices to automatically
collect personal information
The Company can install and operate cookies, which store and find customer
information through provided Internet services. A cookie is character
string information which is stored by a web server on a web browser and is
sent for additional requests by the server. When customers access the
website of Eastar Jet, the Company can provide customers with services
without inputting additional information such as names by reading the
contents of the cookie and finding additional information.
A. Customer information which is collected through cookies can be used for
the following purposes:
1) Providing differentiated information depending on each sector of
personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours
for stay by members and non-members and identifying users' tastes and
interests;
3) Providing personal customized services for the next time of access by
tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer
habits
B. Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option >
Personal information > Advanced" at the upper part of web browser, give
notification in installing cookies or reject all cookies. However, when
customers reject installation of cookies, inconvenience or difficulties may
be caused in using or providing services.
C. Cookies are terminated when the browser is closed or users are logged
out.
11. Measures for technical and managerial protection of personal
information
Eastar Jet handles the Users' privacy with technological and systematic
approaches to prevent loss, theft, leakages, alteration, and compromise and
to secure stability of the information as follows:
A. Encryption of personal information
User passwords are stored and managed by being encrypted in one way, and
identification and change of personal information can be carried out only
by a member who knows the passwords.
B. Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or
compromised by hacking or computer viruses. The information is regularly
backed up for data integrity and protected with the most up-to-date vaccine
programs. All personal information is safely encrypted and transferred on
the network.
Further, the company controls external access without permission by using a
system for blocking infringement and strives to use every possible
technical device to ensure security in other systems.
C. Minimization of employees in charge of processing personal information
and education for the employees
The Company limits the number of employees in charge of managing personal
information to a minimum and makes them recognize the importance of
personal information protection through managerial measures such as
education for staff members handling personal information.
D. Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected
by checking whether measures for protecting personal information are
implemented and staff members comply with regulations through the
in-company organization for protection of personal information.
12. Staff in charge of managing personal information and contact
numbers
Eastar Jet has designated relevant departments and staff members in charge
of managing personal information to protect customer information and deal
with complaints over the management of personal information.
Inquiry for personal information: Reservation Center 1544 - 0080
Staff in charge of managing personal information:
Name: Park Jong-tae, Team Leader of Information System Team 2
Email: [email protected]
Department in charge of managing personal information: Information System
Division
Email: [email protected]
For other reports or counseling on the breach of privacy, please contact
the following institutions;
- Korea Information Security Agency PRIVACY center (without area code) 118
(http://privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee +82-2-2100-2499
(http://www.kopico.go.kr)
- Supreme Prosecutors' Office Cybercrime Investigation Department (without
area code) 1301 (http://spo.go.kr)
- NATIONAL POLICE AGENCY CYBER BUREAU (without area code) 182 (
http://cyberbureau.police.go.kr
)
13. Implementation of Personal Information Handling Policy and revised
contents (Duty of notification)
Eastar Jet complies with all applicable laws and regulations including Act
on Promotion of Information and Communications Network Utilization and
Information Protection, etc., Personal Information Protection Regulations,
Use and Protection of Credit Information Act, Framework Act on Electronic
Commerce, Guidelines for Consumer Protection in the Context of Electronic
Commerce, etc. In consequence, Eastar Jet's Personal Information Handling
Policy is subject to change at any time in accordance with applicable laws.
In case of the revision of the Personal Information Handling Policy, the
company shall announce the date, reasons and contents of the revision on
the website.
◈ Eastar Jet's revised Personal Information Handling Policy has been
effective since December 1st, 2016.
Revision of Personal Information Handling Policy
- Personal Information Handling Policy Version : V2.3
- Date of revision for Personal Information Handling Policy : November 30,
2016
- Reasons of the revision for Personal Information Handling Policy : Change
of name to Personal Information Handling Policy, change in personal
information-processing contractors, and addition of personal information
items notified as being transferred overseas
-
Eastar Jet Co., Ltd. (hereinafter referred to as the "Company" or "Eastar
Jet") considers the protection of users' personal information important and
complies with regulations for the protection of personal information in
relevant legislations such as "Personal Information Protection Act" and
"Act on Promotion of Information and Communications Network Utilization and
Information Protection, etc."
The Company informs how and for which purposes the Company uses personal
information offered by users and measures the Company takes to protect
personal information by notifying the following personal information
handling policy. The Company's Personal Information Handling Policy may
change depending on changes in legislation and announcement or the
Company's terms and conditions and internal policy; in cases of revision,
the Company notifies changes to users or posts changes on the service
screen.
Users are entitled to withhold consent for the collection, use, provision
and consignment of the following personal information. However, when users
withhold consent, whole or partial services cannot be used.
A. Purposes of personal information collection and use
Eastar Jet shall not use the personal information of the subject beyond the
scope this article describes except for cases the subject of personal
information agreed to or is defined by relevant laws.
① Contract and pay settlement for services that have been provided
Sending various information emails for reservation and issuance of airline
tickets, delivery of various products such as airline tickets and souvenirs
and events, granting and reviewing qualification as best members, providing
customized services, verification of bank transactions and banking
services, purchase and collection of fees
② Membership administration
Member verification regarding the membership service details, individual
identification, protection from misuse by delinquent members and protection
from unauthorized use, confirmation for the voluntary sign-up, limitation
of sign-up and number of sign-ups, record preservation for resolution of
the future dispute, complaints and requested issue handling, delivering of
notifications
③ Use in the marketing and advertisement
Development and specialization of new services, provision of customized
services, service offering and advertisements according to the attributes
of demographic research, provision of information on products by the
company and affiliates, identification of access frequency, statistics
regarding the use of service by members, and delivering advertising
information and providing participation opportunity in the events. (User
personal information is not provided to individuals or groups which request
advertising.)
B. Collected personal information
Eastar Jet collects the minimum personal information necessary to
provide services.
① Membership on the website ( www.eastarjet.com)
Mandatory items: Name, Sex, ID, Passwords, Date of birth, Address and
contact number (Mobile phone number, e-mail), CI (connected information),
DI (duplication information)
Selected items: Home phone number, Password information (Name in English,
Password number, Date of expiration, Nationality, Nation of issuance),
Receiving information such as events
② Membership on the mobile page (m.eastarjet.com)
Mandatory items: Name, Sex, ID, Passwords, Date of birth, Contact number
(Mobile phone number, e-mail), CI (connected information), DI (duplication
information)
Selected items: Receiving information such as events
③ In using services
Domestic lines: Reserved user information (Contact number, e-mail),
Information on a person on board (Name, sex, date of birth), Payment
information (Credit card information, bank account information)
International lines: Reserved user information (Contact number, e-mail),
Information on a person on board (Name in English, sex, date of birth,
passport number, passport expiration date, nation of passport issuance)
Payment information (Credit card information, bank account information)
④ The following information can be created and collected in the process of
using services or business:
Records of using services, Access log, Access IP, Payment records
⑤ In applying for an event: ID, Name, Address, Sex, Date of birth, Contact
number (Phone number or e-mail)
C. Provision of personal information to a third party
Eastar Jet uses users' personal information within the notified extent of
"Collection and Use of Personal Information" and does not use the
information beyond that extent without prior consent from users nor provide
a third party with personal information. However, the following cases are
exceptions:
① When users consent to opening information or offering information to a
third party in advance
② When requests are given from an investigation institution and supervisory
authorities in accordance with regulations in the law or procedure and
methods stipulated in the legislations with the purpose of investigation
and inspection
D. Entrusting of collected personal information
For smooth and improved services, Eastar Jet entrusts its service for the
implementation of contracts and provision of services to external companies
as follows:
|
Entrusted company
|
Service entrusted
|
|
FDIK, KSNET
|
Payment process for Eastar Jet's paid products and services
such as airline tickets
|
|
Good TM Co., Ltd.
|
Consultation on reservation and ticketing, providing
information and services on using air transport and
|
|
NICE Information Service Co., Ltd.
|
Real name verification and identification
|
|
Navitaire
Amadeus IT Group S.A.
INFINI TRAVEL INFORMATION, INC.
Travelport
|
Providing services for air flights such as reservation
|
|
Amazon.com Inc.
|
Providing stable services for the mobile website
|
|
EASTARPORT Co., Ltd.
Sharp Co., Ltd.
|
Tasks regarding reservation and transport in Korea such as
boarding procedure
|
|
Bangkok Flight Service Co., Ltd
Societe Concessionnaire De L'Aeroport
MALAYSIAN AIRLINE SYSTEM BERHAD
|
Tasks regarding reservation and transport in Southeast Asia
such as boarding procedure
|
|
Japan Airlines Co., Ltd
|
Tasks regarding reservation and transport in Japan such as
boarding procedure
|
|
EVA AIRWAYS CORPORATION
|
Tasks regarding reservation and transport in Taiwan such as
boarding procedure
|
|
Jardine Airport Services, Ltd
济南遥墙国际机场
上海国际机场地面服务有限公司
大连周水子国际机场集团公司
延吉朝阳川国际机场
中国民航哈尔滨外航服务公司
|
Tasks regarding reservation and transport in China such as
boarding procedure
|
|
Parcel service companies and post office
|
Distribution of airline tickets and giveaways
|
E. Period for possession and use of person information
Eastar Jet possesses and uses customers' personal information for the
period of providing services. When users withdraw membership, collected
personal information is shredded to prevent the use or browsing of the
information. However, when it is necessary to preserve the information in
accordance with regulations in relevant legislations, the information is
preserved in accordance with the legislations.
- Records regarding contract or withdrawal of subscription
Reason for retention: Article 6 of the Act on Consumer Protection in
Electronic Commerce, etc. and Article 6 of the enforcement ordinance
Retention period: 5 years
- Records regarding payments and provision of goods
Reason for retention: Article 6 of the Act on Consumer Protection in
Electronic Commerce, etc. and Article 6 of the enforcement ordinance
Retention period: 5 years
- Records regarding processing of consumer complaints or conflicts
Reason for retention: Article 6 of the Act on Consumer Protection in
Electronic Commerce, etc. and Article 6 of the enforcement ordinance
Retention period: 3 years
- Records regarding access
Reason for retention: Article 15-2 of Protection of Communications Secrets
Act and Article 41 of the enforcement ordinance
Retention period: 3 months
F. Procedure for the disposal of personal information
Eastar Jet in principle disposes of Users' personal information without
delay after the stated goals are fulfilled. Eastar Jet destroys the
personal information in the following procedures and ways;
The information printed out on paper is destroyed through paper shredder or
burned. The personal information stored in files is deleted in technical
ways that prevent any recovery of the record.
G. Rights and duties of users and legal representatives and methods to
exercise
① User and legal representatives with authority are entitled to browse and
modify a member's personal information on "MYPAGE" of the website of Eastar
Jet. When requests are made through e-mail or in writing to staff members
in charge of managing personal information, the Company browses, modifies
or deletes the information. ID, name and date of birth cannot be modified,
but it can be exceptionally approved to change a name due to a changed
name. Cases where deletion or modification is prohibited or limited in
accordance with other legislations can be limited for processing. Further,
when requests are made to modify errors in personal information, such
personal information is not used or provided until the modification is
completed unless provision of personal information is requested by other
legislations. If incorrect personal information is already provided, result
of modification is notified to a third party for modification.
② Users and legal representatives are entitled to request the suspension of
processing personal information on the website of Eastar Jet whenever they
want. However, requests for suspension can be rejected in the following
cases:
1) When it is inevitable to reject requests due to special legal
regulations or compliance with legal duties
2) When it is possible to damage the life and body of others or infringe on
property and interests of others unfairly
3) When information holders do not express their willingness to cancel the
contract in cases where implementation of the contract cannot be conducted
such as when agreed services with information holders cannot be provided
unless personal information is processed
③ Members can withdraw agreed contents for collection, use and provision of
personal information with membership whenever they want. As for withdrawal
of consent, the Company takes necessary measures such as deletion of
personal information without delay when users click "Withdrawal of
membership" on the Company's website or contact staff members in charge of
managing personal information in writing, on the phone or by e-mail.
However, when the Company needs to preserve personal information of members
in accordance with regulations of terms and conditions, processing of
personal information can be limited. In such cases, members should notify
their IDs and identification information to identify personal information,
and some services are restricted or blocked due to withdrawal.
H. Protection of children's personal information
Membership is permitted only for people of the age of 14 and over to
protect personal information of children below the age of 14, and the
Company does not collect children's personal information.
I. Installation, operation and rejection of devices to automatically
collect personal information
The Company can install and operate cookies, which store and find customer
information through provided Internet services. A cookie is character
string information which is stored by a web server on a web browser and is
sent for additional requests by the server. When customers access the
website of Eastar Jet, the Company can provide customers with services
without inputting additional information such as names by reading the
contents of the cookie and finding additional information.
① Customer information which is collected through cookies can be used for
the following purposes:
1) Providing differentiated information depending on each sector of
personal interests;
2) Utilizing for target marketing by analyzing access frequency or hours
for stay by members and non-members and identifying users' tastes and
interests;
3) Providing personal customized services for the next time of access by
tracing contents which users browse with interests;
4) Informing the period of use in using charged services; or
5) Utilizing as a yardstick in changing services by analyzing customer
habits
② Customers have the right to select to install cookies or not.
Customers can accept all cookies in "Tools > Internet Option >
Personal information > Advanced" at the upper part of web browser, give
notification in installing cookies or reject all cookies. However, when
customers reject installation of cookies, inconvenience or difficulties may
be caused in using or providing services.
③ Cookies are terminated when the browser is closed or users are logged
out.
J. Measures for technical and managerial protection of personal
information
Eastar Jet handles the Users' privacy with technological and systematic
approaches to prevent loss, theft, leakages, alteration, and compromise and
to secure stability of the information as follows:
① Encryption of personal information
User passwords are stored and managed by being encrypted in one way, and
identification and change of personal information can be carried out only
by a member who knows the passwords.
② Countermeasures against hacking
Eastar Jet does its best to prevent Users' privacy from being disclosed or
compromised by hacking or computer viruses. The information is regularly
backed up for data integrity and protected with the most up-to-date vaccine
programs. All personal information is safely encrypted and transferred on
the network.
Further, the company controls external access without permission by using a
system for blocking infringement and strives to use every possible
technical device to ensure security in other systems.
③ Minimization of employees in charge of processing personal information
and education for the employees
The Company limits the number of employees in charge of managing personal
information to a minimum and makes them recognize the importance of
personal information protection through managerial measures such as
education for staff members handling personal information.
④ Operation of an organization for protecting personal information
The Company takes immediate corrective measures when problems are detected
by checking whether measures for protecting personal information are
implemented and staff members comply with regulations through the
in-company organization for protection of personal information.
K. Staff in charge of managing personal information and contact numbers
Eastar Jet has designated relevant departments and staff members in charge
of managing personal information to protect customer information and deal
with complaints over the management of personal information.
Inquiry for personal information: Reservation Center 1544 - 0080
Staff in charge of managing personal information:
Name: Park Jong-uk, Head of Information System Division
Email: [email protected]
Department in charge of managing personal information: Information System
Division
Email: [email protected]
For other reports or counseling on the breach of privacy, please contact
the following institutions;
- KISA PRIVACY center (www.118.or.kr/118)
- Supreme Prosecutors' Office Cybercrime Investigation Department
(www.spo.go.kr/02-3480-2000)
- Korean National Police Agency cyber terror response center
(www.ctrc.go.kr/182)
L. Implementation of Personal Information Handling Policy and revised
contents (Duty of notification)
Eastar Jet complies with all applicable laws and regulations including Act
on Promotion of Information and Communications Network Utilization and
Information Protection, etc., Personal Information Protection Regulations,
Use and Protection of Credit Information Act, Framework Act on Electronic
Commerce, Guidelines for Consumer Protection in the Context of Electronic
Commerce, etc. In consequence, Eastar Jet's Personal Information Handling
Policy is subject to change at any time in accordance with applicable laws.
In case of the revision of the Personal Information Handling Policy, the
company shall announce the date, reasons and contents of the revision on
the website.
◈ Eastar Jet's revised Personal Information Handling Policy has been
effective since March 23, 2015.
Revision of Personal Information Handling Policy
- Personal Information Handling Policy Version: V2.2
- Date of revision for Personal Information Handling Policy: March 23, 2015
- Reasons of the revision for Personal Information Handling Policy: Change
in items for collected personal information, Deletion of use of collected
personal information and provision to a third party, Deletion of the item
for the period of possession and use of personal information
home
登入
