<GBnTour> ("www.gbntour.com" hereinafter referred to as "www.gbntour.com") establishes and discloses the following personal information processing policy to protect the personal information of the data subject and handle complaints quickly and smoothly under Article 30 of the Personal Information Protection Act.
○ This personal information processing policy will take effect from January 1, 2023.
Article 1 (Purpose of Personal Information Processing)
<GBnTour> ("www.gbntour.com" hereinafter referred to as "www.gbntour.com") processes personal information for the following purposes: The personal information being processed is not used for any purpose other than the following, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent pursuant to Article 18 of the Personal Information Protection Act.
1. Register and manage homepage membership
Personal information is processed for the purpose of preventing illegal use of services and checking the consent of the legal representative when processing personal information of children under the age of 14.
2. Provision of goods or services
Personal information is processed for the purpose of providing services and sending contracts and bills.
3. Use for marketing and advertising
Personal information is processed for the purpose of developing new services (products) and providing customized services.
Article 2 (Period of Personal Information Processing and Retention)
① <GBnTour> processes and retains personal information within the period of personal information retention and use under laws and regulations or within the period of personal information retention and use agreed upon when collecting personal information from the information subject.
② The processing and retention period of each personal information is as follows.
Article 3 (The items of personal information to be processed)
① <GBnTour> is processing the following personal information items:
Article 4 (Matters concerning the provision of personal information to third parties)
① <GBnTour> processes personal information only within the scope specified in Article 1 (purpose of processing personal information) and provides personal information to third parties only if it falls under Articles 17 and 18 of the Personal Information Protection Act, such as consent of the information subject and special provisions of the law.
② <GBnTour> provides personal information to third parties as follows:
1. < >
Person receiving personal information:
Purpose of using personal information of the recipient:
the possession of the recipientPeriod of use:
Article 5 (Matters concerning entrustment of personal information processing)
① <GBnTour> entrusts personal information processing work as follows for smooth personal information processing.
1. < >
Consignee (trustee):
Contents of entrusted work:
Consignment period:
② In accordance with Article 26 of the Personal Information Protection Act, GBnTour specifies in the contract documents the prohibition of personal information processing, technical and administrative protection measures, re-entrust restrictions, management and supervision of trustees, and damages, and supervises whether the trustee handles personal information safely.
③ If the details of the entrusted work or the trustee changes, we will disclose it without delay through this personal information processing policy.
Article 6 (Procedure and method of destruction of personal information)
① <GBnTour> destroys personal information without delay when personal information becomes unnecessary, such as the lapse of the personal information retention period or the achievement of the purpose of processing.
② If the personal information retention period agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information should be transferred to a separate database (DB) or stored at a different location.
1. Statutory basis:
2. Personal information items to be preserved: account information, transaction date
③ The procedures and methods for destroying personal information are as follows.
1. Revocation procedure
<GBnTour> selects personal information in which the reason for destruction has occurred, and destroys personal information with the approval of the personal information protection manager of <GBnTour>.
2. Destruction method
Information in electronic file formats uses a technical method that does not allow records to be played back.
The personal information printed on the paper is destroyed by pulverizing it with a grinder
Article 7 (Matters concerning the rights and obligations of the data subject and legal representative and the method of exercise thereof)
① The information subject may exercise the right to GBnTour at any time, such as viewing, correction, deletion, and requesting suspension of processing of personal information.
② The exercise of rights under paragraph (1) may be conducted by writing, e-mail, and faxing (FAX) in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and GBnTour will take action without delay.
③ The exercise of the right under paragraph (1) may be conducted through an agent, such as a legal representative of the data subject or a person delegated.In this case, "Notice on how to process personal information (No. 2020-7)" You must submit a power of attorney in accordance with attached Form 11.
④ Requests for suspension of personal information access and processing may be restricted by Article 35 (4) and Article 37 (2) of the Personal Information Protection Act.
⑤ A request for correction or deletion of personal information cannot be requested to be deleted if the personal information is specified as a target for collection under other laws and regulations.
⑥ GBnTour checks whether the person who made the request is himself or a legitimate agent, such as a request for reading, a request for correction or deletion, and a request for suspension of processing.
Article 8 (Matters concerning measures to secure the safety of personal information)
<GBnTour> is taking the following measures to ensure the safety of personal information.
1. Conduct a regular self-audit
In order to secure the stability related to personal information handling, we conduct self-audits on a regular basis (once a quarter).
2. Restricting access to personal information
We take necessary measures to control access to personal information by granting, changing, or canceling access to the database system that processes personal information, and using the intrusion prevention system to control unauthorized access from outside.
3. Access control for unauthorized persons
We set up and operate access control procedures for the physical storage place where personal information is stored separately.
Article 9 (Matters concerning the installation and operation of devices that automatically collect personal information and the rejection thereof)
GBnTour does not use 'cookie' that stores the information subject's usage information and retrieves it from time to time.
Article 10 (Matters concerning the collection, use, provision, refusal, etc. of behavioral information)
Matters concerning the collection, use, provision, refusal, etc. of behavioral information;
<Privacy Manager Name> does not collect, use, or provide behavioral information for online customized advertisements.
Article 11 (Criteria for determining additional use and provision)
<GBnTour> can additionally use and provide personal information without the consent of the data subject in consideration of matters under Article 14-2 of the Enforcement Decree of the Personal Information Protection Act under Articles 15 (3) and 17 (4) of the Personal Information Protection Act.
Accordingly, in order for <GBnTour> to additionally use and provide additional information without the consent of the information subject, the following matters were considered.
▶ Whether the purpose of additional use and provision of personal information is related to the original purpose of collection.
▶ Whether there is any predictability of additional use or provision in light of the circumstances or processing practices in which personal information is collected.
▶ Whether the additional use and provision of personal information unfairly infringes on the interests of the information subject.
▶ Whether measures necessary for securing safety, such as pseudonym processing or encryption, have been taken.
※ The criteria for determining the considerations for additional use and provision shall be prepared and disclosed autonomously by the business operator/organization.
Article 12 (Matters concerning the processing of pseudonym information when processing pseudonym information)
<GBnTour> is processing alias information for the following purposes:
▶ Purpose of Processing Alienation Information
- You can create it yourself.
▶ Processing and retention period of alias information
- You can create it yourself.
▶ Matters concerning the provision of pseudonym information to third parties (created only where applicable)
- You can create it yourself.
▶ Matters concerning the entrustment of the processing of pseudonym information (created only where applicable)
- You can create it yourself.
▶ Items of personal information processed under false names
- You can create it yourself.
▶ Matters concerning measures to secure the safety of pseudonym information under Article 28-4 of the Act (Obligation to take safety measures for pseudonym information, etc.);
- You can create it yourself.
Article 13 (Matters concerning the person in charge of personal information protection)
① GBnTour is in charge of personal information processing, and designates a person in charge of personal information protection as follows to handle complaints and remedy damages of information subjects related to personal information processing.
▶ Person in charge of personal information protection
Name: Yoon Kwon-deok
Position: Representative
Position: Representative
Contact: 010-9279-7842, ssamonim21@naver.com, 02-6954-1231
※ You will be connected to the privacy department.
▶ Personal Information Protection Department
Department name: Administrative history
Person in charge: Kim Kyung-hee
연락처 :010-9953-7817, lastsoldier@naver.com, 02-6954-1931
② The information subject can contact the personal information protection manager and the department in charge of all personal information protection inquiries, complaints, and damage relief that occurred while using GBnTour's service (or business). GBnTour will answer and process inquiries from the information subject without delay.
Article 14 (Designation of Domestic Agent)
The information subject may contact the domestic representative of <GBnTour> designated pursuant to Article 39-11 of the Personal Information Protection Act for work such as handling personal information-related grievances. <GBnTour> will try to quickly handle the work of the person in charge of personal information protection, such as handling personal information-related grievances of the information subject.
▶ <GBnTour> has designated a domestic agent in accordance with Article 39-11 of the Personal Information Protection Act.
