LOTTEJTB Privacy Policy
This Privacy Policy sets out how LOTTEJTB (“we”, “our” or “us”) collects, uses, stores and otherwise processes Personal Information defined in the applicable law in relation to the use of our services.
Local-specific clauses (Section 11) also apply to residents in those territories and may in some cases set out different standards due to applicable local laws and regulations. In the event that this creates a conflict between the local-specific clause and any other clause, the local-specific clause will govern.
In the event of conflict between the English version and other language version of this Privacy Policy, the English version shall prevail.
Table of contents
1 Categories of Personal Information we collect
<Collection method>
We collect the above information by asking you to provide them.
<Collection method>
We collect the above information by asking you to provide them.
<Collection method>
We may ask you to participate in a survey. If you choose to answer the survey, we collect any information you provide in your responses.
<Collection method>
We collect the above information automatically when you use our services or when you access to our website.
<Collection method>
We collect the above information through your inquiry.
We may receive Connecting Information (CI) from third parties where necessary to provide membership services and partnership-based services.
2 Purposes for processing Personal Information
This includes making necessary notifications and responding to your inquiry.
3 Sharing Personal Information
We share your Personal Information with the following entities
Entities with whom we share Personal Information | Categories of Personal Information | Detail |
JTB Group Companies | All categories of Personal Information listed in Section 1. | We share Personal Information with JTB Group Companies where those companies process it on our behalf to provide products and services to you, to conduct marketing and communication activities, or when it is necessary to perform a contract or to take steps. Specific company names can be found below: |
Business partners | “Your profile” and “Information you register when you use our services”. We may share “Responses to the survey” and “Information about your inquiry” when they relate to Business Partners. | We share Personal Information with our business partners such as hotels and airline companies to provide you with our services. Business partners who receive such Personal Information differ depending on the travel plans booked by you but are limited to those partners necessary for us to provide travel services. If you would like to know the specific name of the business partners who receive your Personal Information, please contact us as indicated in Section 10 “Contact Information” below. |
Service providers | All categories of Personal Information listed in Section 1. | We share Personal Information with service providers including professional advisors such as lawyers, travel service providers, electronic payment service providers, and system service providers including cloud service providers. |
Advertising and Analytics Providers | All categories of Personal Information listed in the item a. and d. in the paragraph 1.1.1 | We share Personal Information with advertising and analytics providers to provide you with news, offers, promotions and advertisements (including those based on profiling of your interests and preferences) via email or online advertisements. |
Government or public authorities, law enforcement officials, courts, regulators or similar. | All categories of Personal Information listed in Section 1. | We may share Personal Information with government or public authorities, law enforcement officials, courts, regulators or similar if required by law, or if necessary for us to protect our legitimate interests, or the interests of others, in compliance with applicable laws. |
Counterparty of Business transfer | All categories of Personal Information listed in Section 1. | In the event that we undertake a merger, acquisition, reorganization or disposal, Personal Information may be disclosed to any prospective purchaser and its advisers and will be passed to the new owners of the business. |
4 International Transfer
We will process and store your Personal Information for the purposes outlined in this Privacy Policy in the Republic of Korea. In addition, we may transfer your Personal Information to other countries/regions when it is necessary for us to provide services to you.
Any transfers outside your country/region that do not provide an adequate level of data protection will be secured through appropriate contractual guarantees such as standard contractual clauses specified under the Regulation (EU) 2016/679 (General Data Protection Regulation)
5 Retention
We will retain Personal Information for as long as it is necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
In the event that we delete Personal Information after the above period or for any other reason, we irreversibly destroy Personal Information recorded and stored in electronic files, and shreds or incinerate any Personal Information recorded and stored by paper-based means.
6 Security
We have taken necessary and appropriate safety management measures to protect Personal Information, such as preventing leakage, loss, or damage. The main contents of these measures are as follows:
7 Children
Our services are not directed to, and does not knowingly collect Personal Information from children. If you are a parent or guardian and are concerned that your child has provided us with Personal Information without your consent, you should contact us as indicated in Section 10 “Contact Information” below
8 Privacy Rights
9 Changes to this Privacy Policy
This Privacy Policy may be updated from time to time for any reason. We will notify you of any changes to this Privacy Policy and, where required by applicable law, request your consent to such changes.
10 Contact information
For requests to access Personal Information or inquiries regarding this Policy, you may contact the department below.
Personal Information Access Request Handling Department | |
Department | IT Planning |
TEL | 82-2-6313-8034 |
FAX | 82-2-6313-8592 |
Address | 13Fl, Central Place, 50, Seosomun-ro, Jung-gu, Seoul, 04505, Korea |
11 Local specific clauses
This section provides for certain local-specific amendments which may apply depending on which you are located or reside in and other factors set forth by local laws and regulations. The following provisions supplement the sections above. In case of a conflict or inconsistency, the specific local clause prevails.
In the event of any conflict between the English and local language versions of this Privacy Policy, the English version shall prevail.
11.1 Japan
We will share and jointly use the Personal Information of our customers/users as follows.
Personal Information listed in Section 3.
Our group companies (Please refer to the following for our group companies)
https://www.jtbcorp.jp/jp/jtb_group/
The purposes of joint use shall be included within the scope of the purpose of use mentioned in Section 3.
In order to arrange travel services provided by transportation/accommodation facilities in the travel for which the customer applies or for the purpose of use as set forth in Section 3, we may, upon informing you of the country or region in which your Personal Information is to be provided, transfer Personal Information to transportation/accommodation facilities, service providers, or other third parties in the country or region above. In this case, it is as follows.
We will inform you orally, by pamphlets, brochures, travel terms and conditions documents, notice documents, or websites, e-mails or other electromagnetic means.
Please see [https://www.jtbcorp.jp/jp/jtb_group/]
We may transfer Personal Information to a third party in a foreign country after taking measures such as concluding an agreement with such third party to implement appropriate measures for the protection of Personal Information.
We will take appropriate protective measures to prevent the identification of specific individuals and the restoration of such Personal Information used for production, and will prepare anonymously processed information and provide such information to third parties to the extent permitted by law.
When preparing anonymously processed information, we process the information appropriately according to the following in accordance with the standards stipulated by the Personal Information Protection Law and the Rules of the Personal Information Protection Committee.
Items and methods of provision of information included in anonymously processed information prepared by us and provided to third parties are as follows.
11.2 European Economic Area, United Kingdom and Switzerland
Purpose | Legal Basis |
To provide services you have asked us to provide to you. This includes managing your payments, making necessary notifications and responding to your inquiry. | The processing is necessary to perform a contract or to take steps, at your request, prior to entering into a contract with you. |
To analyse your use of the service in order to improve and develop our services, marketing strategy and business. | The processing is necessary for the purposes of the legitimate interests. |
To provide you with news, offers, promotions and advertisements via email or online advertisements. | Consent. You can withdraw your consent at any time by sending an e-mail to request for withdrawal to “us”. |
To provide you with tailored news, offers, promotions and advertisements based on profiling of your interests and preferences via email or online advertisements. | Consent. You can withdraw your consent at any time by sending an e-mail to request for withdrawal to “us”. |
To protect interests and legal rights of us and our users. | The processing is necessary for the purposes of the legitimate interests. |
To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar in accordance with our legal and regulatory obligations under the applicable law. | The processing is necessary for compliance with a legal obligation to which the controller is subject. When the applicable law is other than those of your country of residence, we process your Personal Information for the purposes of the legitimate interests. |
11.3 United States
The tight to confirm whether we are processing Personal Information and to access such information. Residents in certain states may also obtain a list of third parties with whom we have shared personal data.
The right to correct inaccurate Personal Information we hold about you.
The right to delete the Personal Information provided by you or obtained about you.
The right to obtain a copy of the Personal Information previously collected by us and, to extent feasible, in a readily usable format to allow data portability.
If for any reason you would like to appeal a decision made by us relating to your request to exercise privacy rights, you have the right to submit an appeal to us. Please include your full name, the basis for your appeal and any other additional information to consider.
Some state laws may set forth the right to opt-out of advertising and analytics practices that may be considered “Targeted Advertising” or “Sale/Selling” of Personal Information under the applicable state law. To exercise the above right, please ensure that you may send an e-mail to request for opt-out to “us”, and you may also submit a request at: the Contact in Section 10.
While some state laws may set forth the right to opt-out of the automated decision making and profiling in furtherance of decisions that produce legal or similarly significant effects, we do not engage in such activities.
Request information regarding what Personal Information we collect, use, disclose and sell, including the right to request that we provide you with the categories and specific pieces of Personal Information we have collected about you.
Request correction of inaccurate Personal Information that we maintain about you.
Request deletion of Personal Information that we maintain about you.
Request to opt-out of the “sale” of your Personal Information or the “sharing” of your Personal Information to a third party for cross-contextual behavioral advertising (i.e., targeted advertising).
A consumer has the right to limit the use of the consumer’s sensitive Personal Information to certain purposes such as the purpose which is necessary to perform the services or provide the goods reasonably expected by on average consumer who requests such goods or services. We do not offer this right because we do use and disclose sensitive Personal Information only for such purposes.
When making the above request, please provide us with enough information to allow us to verify you are the data subject of the Personal Information that we collected, or their authorized representative. You must also describe your request with enough detail so that we can understand, evaluate and respond to it.
When you exercise your Right to Know, Right to Delete, and /or Right to Correct, we may ask you to provide us with additional information to verify your identity and process your request. If we obtain such additional information, we may not be able to process the request.
If you are an authorized representative submitting a request on a consumer’s behalf, please complete the applicable request per the instructions below. We will follow up to request a signed, written permission signed by the individual who is the subject of the request. The written permission must state your full legal name, the full legal name of the individual who is the subject of the request, and a clear description of the permission granted. Alternatively, you may submit a copy of a power of attorney under applicable state law. Please keep in mind that if we do not receive adequate proof that you are authorized representative, we may deny the request.
Please submit your request at: E-mail privacy@lottejtb.com
To opt-out of “sale” or “sharing” of your Personal Information for cross-context behavioral advertising, please contact us, and you may also submit a request at: Do Not Sell or Share My Personal Information.
We retain Personal Information for as long as it is necessary for the purposes outlined in this California Privacy Notice. However, we will keep the data for so long as is reasonably necessary if we are required to retain information by law.
California consumers have the right to not receive discriminatory treatment for exercising CCPA rights. We will not discriminate against you for exercising your CCPA rights.
Under California regulations, if offer certain loyalty or similar program(s) directly or reasonably related to the collection, retention or deletion of your Personal Information, such program may be considered a “financial incentive”. In such case, we will be required to make additional disclosures to you, which we will provide when you agree to participate.
The Personal Information we collect about you will depend upon you use services. Accordingly, we may not collect all of the below information. In addition to the below, we may collect and use additional type of information and will do so after providing notice to you and obtaining consent to the extent such notice and consent is required by applicable law.
We may have used Personal Information for the business or commercial purposes described in the following Table 1.
Under the California “Shine the Light” law, you have the right to receive the following information:
To obtain such information, please email your request to us, and include your name, email address, mailing address or zip code, and a reference to “Your California Privacy Rights”.
[Table 1]
Categories of Personal Information |
Purposes for collection of Personal Information |
Categories of sources from which Personal Information was collected |
To whom we may disclose Personal Information for a business purpose |
Third Parties We Share with for Cross Context Behavioural Advertising |
Identifiers: Such as real name, postal address, email address, online identifier and IP address |
•To provide services you have asked us to provide to you.
•To analyse your use of the service in order to improve and develop our services, marketing strategy and business.
•To provide you with news, offers, promotions and advertisements (including those based on profiling of your interests and preferences).
•To protect interests and legal rights of us and our users. •To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar.
|
•Consumers
•JTB Group Companies
•Business Partners
•Cookies or similar technologies
|
•Business partners
•Service providers
•Government authorities, law enforcement officials, regulators, and court and similar.
•Counterparty of Business transfer
|
•Advertising and Analytics Providers
|
Commercial information: Such as records of services purchased or considered and other purchasing or consuming histories or tendencies. |
•To provide services you have asked us to provide to you.
•To analyse your use of the service in order to improve and develop our services, marketing strategy and business.
•To provide you with news, offers, promotions and advertisements (including those based on profiling of your interests and preferences).
•To protect interests and legal rights of us and our users.
•To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar.
|
•Consumers
•JTB Group Companies
•Business Partners
|
•Business partners
•Service providers
•Government authorities, law enforcement officials, regulators, and court and similar.
•Counterparty of Business transfer
|
•Advertising and Analytics Providers
|
|
Internet or other electronic network activity information: Such as browsing history and information regarding a consumer’s interaction with an internet website, application, or advertisement |
•To provide services you have asked us to provide to you.
•To analyse your use of the service in order to improve and develop our services, marketing strategy and business.
•To provide you with news, offers, promotions and advertisements (including those based on profiling of your interests and preferences).
•To protect interests and legal rights of us and our users.
•To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar.
|
•Consumers
•JTB Group Companies
•Cookies or similar technologies
|
•Business partners
•Service providers
•Government authorities, law enforcement officials, regulators, and court and similar.
•Counterparty of Business transfer
|
•Advertising and Analytics Providers
|
|
Inferences drawn from any of the information identified in this section to create a profile about a consumer reflecting the consumer’s preferences and characteristics. |
•To provide you with news, offers, promotions and advertisements (including those based on profiling of your interests and preferences).
|
•Consumers
•Government authorities, law enforcement officials, regulators, and court and similar.
•Counterparty of Business transfer
|
•Advertising and Analytics Providers
|
|
|
Sensitive Information: Such as passport number, allergy information and disability information |
•To provide services you have asked us to provide to you.
•To protect interests and legal rights of us and our users.
•To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar.
|
•Consumers
•JTB Group Companies
|
•Business partners
•Service providers
•Government authorities, law enforcement officials, regulators, and court and similar.
•Counterparty of Business transfer
|
•Advertising and Analytics Providers
|
|
Responses to the survey |
•To provide services you have asked us to provide to you.
•To analyse your use of the service in order to improve and develop our services, marketing strategy and business.
•To provide you with news, offers, promotions and advertisements (including those based on profiling of your interests and preferences).
•To protect interests and legal rights of us and our users.
•To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar.
|
•Consumers
•JTB Group Companies
|
•Business partners
•Service providers
•Government authorities, law enforcement officials, regulators, and court and similar.
•Counterparty of Business transfer
|
•Advertising and Analytics Providers
|
|
Information about your inquiry |
•To provide services you have asked us to provide to you.
•To analyse your use of the service in order to improve and develop our services, marketing strategy and business.
•To provide you with news, offers, promotions and advertisements (including those based on profiling of your interests and preferences).
•To protect interests and legal rights of us and our users.
•To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar.
|
•Consumers
•JTB Group Companies
|
•Business partners
•Service providers
•Government authorities, law enforcement officials, regulators, and court and similar.
•Counterparty of Business transfer
|
•Advertising and Analytics Providers
|
11.4 Canada (including Québec)
Through your use of our services, your Personal Information will be transferred outside of Canada or state where you live. Please see Section 3 for categories of recipients.
If your Personal Information is transferred to jurisdictions outside of Canada, it may be subject to the laws of those jurisdictions, which may allow access by courts, law enforcement, or government authorities in accordance with their laws.
You may obtain written information regarding our policies and practices with respect to service providers outside Canada, by sending an e-mail to us. You may also contact our e-mail (e-mail: privacy@lottejtb.com) for questions about the collection, use, disclosure, or storage of Personal Information by such service providers.
Subject to certain exceptions, you may have the following rights regarding your Personal Information in addition to the rights listed in Section 8:
Right to Access. Request to confirm the existence of the Personal Information, communicate it to you, and allow you to obtain a copy of it.
Right to Rectify. Request rectification of inaccurate, outdated or incomplete Personal Information we maintain about you.
Right to Withdraw Consent. Request to withdraw previously provided consent to the communication or use of the information collected.
11.5 China
Purpose | Legal Basis |
To provide services you have asked us to provide to you. This includes managing your payments, making necessary notifications and responding to your inquiry. | The processing is necessary to perform a contract or to take steps, at your request, prior to entering into a contract with you. |
To analyse your use of the service in order to improve and develop our services, marketing strategy and business. | This processing is based on your consent to this Privacy Policy or separate consent on cookie settings. For the latter, you can withdraw your consent at any time by accessing the Cookie setting page on our website. |
To provide you with news, offers, promotions and advertisements via email or online advertisements. | Your separate consent. You can withdraw your consent at any time by sending an e-mail to request for withdrawal to “us”. |
To provide you with tailored news, offers, promotions and advertisements based on profiling of your interests and preferences via email or online advertisements. | Your separate consent. You can withdraw your consent at any time by sending an e-mail to request for withdrawal to “us”. |
To protect interests and legal rights of us and our users. | This processing is based on your consent to this Privacy Policy. |
To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar in accordance with our legal and regulatory obligations under the applicable law. | We process Personal Information in order to comply with Chinese laws and regulations. When the applicable law is other than Chinese laws, we process your Personal Information based on your consent to this Privacy Policy. |
Where we collect the Personal Information based on your separate consent to this Privacy Policy, provision of any requested Personal Information is optional. In all other cases, provision of any requested Personal Information is mandatory, and we will not be able to provide services to you without this information.
11.6 South Korea
Personal Information | Purpose | Retention | Legal Basis |
(Lotte Members Integration) Name, Email Address (ID), Mobile phone number, Address | To analyse service usage, provide personalized services and information, and send promotional and event notifications | Until you withdraw your consent or terminate the service | Consent (Article 15(1)(1) of the Personal Information Protection Act) |
(Savings-type Cruise Program) Name, Mobile phone number | To analyse service usage, provide personalized services and information, and send promotional and event notifications | Until you withdraw your consent or terminate the service | Consent (Article 15(1)(1) of the Personal Information Protection Act) |
Personal Information | Purpose | Retention | Legal Basis |
Passport Number | To process travel product reservations, provide airline ticket consultation, booking and ticketing services, confirm eligibility for international travel, and provide visa application services | Until the completion of the trip | Applicable laws including the Personal Information Protection Act, Aviation Security Act, and Immigration Control Act |
Health information (e.g., pregnancy or disability status), dietary restrictions, or other information that may affect the travel itinerary | Collected only where necessary to ensure the safe and smooth provision of travel services <Additional Notice> If you do not wish for us to retain such information, you may request the deletion of your Personal Information immediately after the travel service has ended. | Up to 1 year after the completion of the trip. However, information related to injuries or illnesses that occur during the trip will be deleted after insurance processing is completed. | Consent (Article 15(1)(1) of the Personal Information Protection Act) |
Personal Information | Purpose | Retention | Legal Basis |
Name, Mobile phone number, Address | To administer customer satisfaction surveys, conduct prize drawings, provide prizes, and handle related inquiries | Up to 2 months after survey completion. Winner information may be retained for up to 1 year. | Consent (Article 15(1)(1) of the Personal Information Protection Act) |
Personal Information | Purpose | Retention | Legal Basis |
Resident Registration Number (RRN) | To establish, maintain, and terminate contracts, and to comply with obligations under applicable laws, including the Labor Standards Act, Income Tax Act, Social Insurance laws, and other relevant regulations | For 10 years after the termination of the contract, or for the period required under applicable laws and regulations | Income Tax Act Article 145 (Submission of Payment Records, etc.) |
Biometric Information (Fingerprint Data) | To manage internal access control and security | For 1 month after the termination of the contract | Consent (Article 15(1)(1) of the Personal Information Protection Act) |
- In certain cases, we may collect and process Personal Information without your consent where it is necessary to enter into or perform a travel service contract with you, or where otherwise permitted under applicable laws. This may include.
Personal Information | Purpose | Retention | Legal Basis |
(Lotte Members Integration) General Users: Name, Email Address (ID), Password, Mobile phone number, Date of birth, Gender, Address Corporate Users: Name (or Company Name), Email Address, Password, Address, Mobile phone number Foreign Users: Name, Email Address (ID), Password, Mobile phone number, Nationality, Date of birth, Gender | Account registration and management, prevention of duplicate registrations, and provision of membership services | Until membership termination. However, where retention is required to verify rights and obligations related to transactions under applicable laws (e.g., the Commercial Act), the information may be retained for the period required by such laws. | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
(Naver Login Integration) Name, Email Address, Date of birth, Mobile phone number, CI (Connecting Information) | To enable login and authentication through Naver social login integration | Until membership termination. However, where retention is required to verify rights and obligations related to transactions under applicable laws (e.g., the Commercial Act), the information may be retained for the period required by such laws. | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
(Savings-Type Cruise Program) Subscriber: Name, Date of birth, Address, Contact Information Account Holder: Name, Date of birth, Bank Name, Bank Account Number, Contact Information | Fee collection through CMS automatic debit, membership management, and provision of travel product information | 3 years after service termination. However, where retention is required under applicable laws (e.g., the Commercial Act), the information may be retained for the legally required period. | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
(Lotte Members Integration – Optional) Name, Email Address (ID), Mobile phone number, Address | Service usage analysis, provision of personalized service information, and delivery of promotional and event information | Until you withdraw your consent or terminate the service | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
(Savings-Type Cruise Program – Optional) Name, Mobile phone number | Service usage analysis, provision of personalized service information, and delivery of promotional and event information | Until you withdraw your consent or terminate the service | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Personal Information | Purpose | Retention | Legal Basis |
Name, Date of birth, Gender, Email Address, Mobile phone number | Travel product reservations, customer consultation, and service information | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Name, Date of birth, Gender, Visa/Passport possession status, Passport information (issue date, expiration date, nationality, issuing country), Mobile phone number | Travel product reservation, travel service use, and confirmation of eligibility for international travel | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Name, Date of birth, Gender, Passport/Visa possession status, Passport information (expiration date, nationality, issuing country), Mobile phone number Additional documents where applicable: • Passport copy and identification documents for discounted airfare reservations • Corporate card verification (card copy, business registration certificate or business card) • Family card verification (card copy and family relationship certificate) | Airline ticket consultation, reservation, and ticketing services | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Name, Gender, Age | Hotel consultation and reservation services | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Name, Passport information (issue date, expiration date, nationality, issuing country), Mobile phone number, Address, Emergency Contact, Stay Information | Visa application services | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Name, Date of birth, Gender, Driver’s License Type (Domestic) | Rental car consultation and reservation services | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Name, Date of birth, Gender | Travel insurance enrollment services | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Legal guardian’s Name, Relationship, Contact Information, Family Relationship Certificate | Verification of legal guardian identity and consent when making reservations for minors under the age of 14 | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Name, Credit Card Information (card number, expiration date, first two digits of card password), Relationship with the contract holder, Bank Account Number, Account Holder Name | Payment, settlement, and refunds for travel products | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Name, Mobile phone number, Address | Payment, settlement, and refunds for Lotte JTB gift certificates | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Name, Date of birth, Mobile phone number, Lotte Membership Card Number | L.POINT accumulation | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Mobile phone number, Cash Receipt Card Number (for income deduction) Mobile phone number, Business Registration Number (for expense proof) | Issuance of cash receipts | 5 years after the completion of the trip or for the period required under applicable laws. Airline Supporting Documents: Discount proof – 2 years after trip completion; Card proof – until the completion of the trip | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Personal Information | Purpose | Retention | Legal Basis |
Name, Email Address (ID), Mobile phone number, Business Card Information | Provision of services for employees of affiliated companies | 1 year from the date of registration or submission | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Provision of services for employees of affiliated companies | Travel consultation and quotation inquiries, Handling customer complaints and inconvenience reports | 3 years from the date of registration or submission | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Personal Information | Purpose | Retention | Legal Basis |
Name, Date of birth, Gender, Nationality, Address, Telephone Number, Mobile phone number | • Establishment, maintenance, and termination of contracts• Compliance with obligations under the Labor Standards Act, Income Tax Act, social insurance laws, and other applicable laws and regulations • Fulfillment of obligations under the Standard Terms and Conditions for Tourist Interpreter Guides • Issuance of system accounts for work purposes | 10 years after the termination of the contract or until the retention period required by applicable laws and regulations | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Contract period, contract amount, payment details, bank account number | • Establishment, maintenance, and termination of contracts• Compliance with obligations under the Labor Standards Act, Income Tax Act, social insurance laws, and other applicable laws and regulations • Fulfillment of obligations under the Standard Terms and Conditions for Tourist Interpreter Guides • Issuance of system accounts for work purposes | 10 years after the termination of the contract or until the retention period required by applicable laws and regulations | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Tourist Interpreter Guide License Number | • Establishment, maintenance, and termination of contracts• Compliance with obligations under the Labor Standards Act, Income Tax Act, social insurance laws, and other applicable laws and regulations • Fulfillment of obligations under the Standard Terms and Conditions for Tourist Interpreter Guides • Issuance of system accounts for work purposes | 1 month after the termination of the contract | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
Personal Information | Purpose | Retention | Legal Basis |
[Member] Business Registration Number, Business Name, Name of Representative, Telephone Number, Address, Bank Account Number for Deposit, Copy of Bankbook, Email Address for Receiving Tax Invoices, Copy of Business Registration Certificate [Primary Administrator] Name, ID, Password, Telephone Number, Mobile phone number, Email Address | Issuance of system accounts for the use of related services such as ticketing requests and settlement | Until membership termination or until the retention period required by applicable laws and regulations | Article 15(1) of the Personal Information Protection Act (Performance of a Contract) |
- We may automatically collect certain Personal Information when you use our services or access our website
Source of Collection | Purpose | Personal Information Provided | Retention |
Lotte Members membership service Naver airline service users G-market airline service users | Connecting Information (CI) | Provision of membership and partnership services, user identification, reservation processing, and transaction fulfillment | Until the purpose of service provision is achieved or as required by applicable laws |
We collect Personal Information through various methods, including when you provide it through our website, by telephone or fax, through agreements with tour guides, or through partner companies, including when you submit information at your request.
We process Personal Information of data subjects only within the scope specified for the purposes of processing. We provide Personal Information to third parties only where the data subject has given consent or where such provision is permitted under applicable laws, including Articles 17 and 18 of the Personal Information Protection Act. Otherwise, we do not provide Personal Information of data subjects to third parties.
|
Recipient |
Purpose |
Personal Information Provided |
Retention |
|
Korean Air, Asiana Airlines, and other domestic and international airlines
[View Details] |
Airline ticket reservation, issuance, payment services, and verification of eligibility for departure |
[Booker] Name, Email, Mobile phone number, Card Information (Card Number, Expiration Date, First Two Digits of Card Password) [Traveler] Name, Date of birth, Gender, Email, Mobile phone number, Nationality, Passport Information (Passport Number, Passport Expiration Date, Country of Issue), Address of Stay, Airline Mileage Number Additional for Refund Requests: Bank Name, Account Number, Account Holder |
Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
|
Cruise Partners
[View Details] |
Cruise reservation and verification of eligibility for departure |
[Booker] Name, Email, Mobile phone number, Card Information (Card Number, Expiration Date, First Two Digits of Card Password) [Traveler] Name, Date of birth, Gender, Email, Mobile phone number, Nationality, Passport Information (Passport Number, Passport Expiration Date, Country of Issue)Additional for Refund Requests: Bank Name, Account Number, Account Holder |
Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
|
HotelPass |
Agency service for domestic and overseas accommodation reservations |
[Booker] Name, Email, Mobile phone number, Card Information (Card Number, Expiration Date, First Two Digits of Card Password) [Traveler] Name, Gender, Age |
Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
Local Tour Operators (Land Operators)
[View Details] |
Operation of domestic and overseas events and customer management |
[Traveler] Name, Contact Information, Date of birth, Email, Passport Information (Passport Number, Expiration Date) |
Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
MOVV | Provision of private transportation services |
Name, Contact Information | Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
HanaTour | Travel product reservation processing and confirmation |
[Booker] Name, Mobile phone number, Email [Traveler] Name, Mobile phone number, Date of birth, Gender, Passport Information (Passport Number, Expiration Date) |
Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
Kumho Buslines Tourism |
Provision of chartered bus services |
Name, Contact Information, Email |
Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
Naver |
Reservation confirmation and accumulation of promotional/event points |
Naver User Unique Identifier, Last Four Digits of Mobile phone number, Airline Ticket and Travel Product Reservation Information |
Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
Lotte Insurance, ACE American Fire & Marine Insurance |
Enrollment in travel insurance and identity verification when claiming insurance benefits |
Name, Date of birth, Gender |
Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
Linktivity |
Activity reservations, individual bookings, and service operation |
Name, Date of birth For transfer reservations: Accommodation Information, Arrival/Departure Date Information, Local Contact Information For reservations including meals: Allergies For diving experience reservations: Possession and level of diving certification When verification of participation eligibility is required: Health condition |
Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
JR Pass reservation and issuance |
Name |
Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
|
Guides / Tour Conductors |
Travel guidance and tour management |
Name, Contact Information |
Until the termination of the travel contract or for the mandatory period required under applicable laws and regulations |
National Tax Service |
Issuance of cash receipts |
For income deduction: Mobile phone number, Cash Receipt Card Number For expense proof: Mobile phone number, Business Registration Number |
|
Recipient |
Purpose |
Personal Information Provided |
Retention |
Korea Workers’ Compensation & Welfare Service |
Insurance eligibility verification and year-end insurance premium settlement |
Name, Resident Registration Number, Contact Information, Contract Status, Occupation, Contract Date, Contract End Date, Monthly Salary, Annual Income |
Until the purpose of use has been achieved or for the period required under applicable laws and regulations |
Shinhan Bank, KB Kookmin Bank, Hana Bank |
Payment of contract amount | Name, Bank Account Number, Salary Bank, Salary Amount |
Until the purpose of use has been achieved or for the period required under applicable laws and regulations |
In accordance with Article 26 of the Korean Personal Information Protection Act, the Company specifies in contracts and other relevant documents the purpose of data processing, prohibition of processing beyond the scope of the entrusted tasks, technical and administrative security measures, restrictions on sub-entrustment, supervision of entrusted parties, and liability for damages. The Company monitors entrusted parties to ensure the secure processing of Personal Information.
|
Service Providers (Processors) |
Processing Activities |
|
Lotte Members Co., Ltd. |
Identity verification service |
Lotte Innovate Co., Ltd. |
Development and maintenance of the product reservation management system |
NS Soft |
Development and maintenance of the installment cruise customer management system |
Taesung Innovation |
Maintenance of telecommunication equipment, electrical equipment, and call recording systems |
TOPAS |
Development and maintenance of the airline reservation management system |
NICE Information Service Co., Ltd. |
Identity verification and foreigner status verification |
KG Inicis Co., Ltd. |
Payment processing service |
KS-NET |
Credit card payment authorization and automatic deposit service for sales transactions |
Namie |
Production of guide business cards |
Winning |
Visa processing agency service |
Hyphen Corporation |
Firm banking (corporate banking integration) service |
Toss Payments Inc. |
Payment processing service |
|
Processor |
Sub-processor |
Processing Activities |
|
KG Inicis Co., Ltd. |
KS Korea Employment Information Co., Ltd. |
Customer consultation support |
Toss Payments Inc. |
Toss CX Co., Ltd. |
Customer center operation |
Toss Payments Inc. |
Wise Infotech Co., Ltd. |
Operation and maintenance of the electronic payment system |
Toss Payments Inc. |
Avercus Co., Ltd. |
Operation and maintenance of the electronic payment system |
Toss Payments Inc. |
KOVAN Co., Ltd. |
intermediation of transaction details (when using payment terminals) |
Toss Payments Inc. |
T Scientific Co., Ltd. |
Server and system monitoring |
Toss Payments Inc. |
Comtec Systems Co., Ltd. |
Operation of network equipment and security equipment |
Toss Payments Inc. |
Amazon Web Services Inc. |
Operation of cloud infrastructure |
Toss Payments Inc. |
Coocon Co., Ltd. |
Bank account validity verification |
Toss Payments Inc. |
Hecto Financial Co., Ltd. |
Processing of bank transfer payments (when using virtual accounts) |
We may disclose Personal Information to relevant authorities without the consent of the data subject in emergency situations, including but not limited to disasters, infectious diseases, incidents or accidents that pose an imminent threat to life or bodily safety, or situations involving an imminent risk of significant property loss. Personal Information may also be disclosed without the data subject’s consent when required for investigative purposes or upon request from competent authorities in accordance with applicable laws and regulations.
|
Category |
Recipient |
Purpose |
Legal Basis |
Disaster Response |
Central Disaster and Safety Countermeasures Headquarters or Local Disaster and Safety Countermeasures Headquarters |
Name, Resident Registration Number, Address, Telephone Number (including mobile phone number) |
Article 74-3 of the Framework Act on the Management of Disasters and Safety (Request for Information, etc.) |
Disaster Response |
Central Disaster and Safety Countermeasures Headquarters or Local Disaster and Safety Countermeasures Headquarters |
Information required for tracking movement routes and for search and rescue, including: |
Article 74-3 of the Framework Act on the Management of Disasters and Safety (Request for Information, etc.) |
Disaster Response |
Central Disaster and Safety Countermeasures Headquarters or Local Disaster and Safety Countermeasures Headquarters |
a. Information collected through CCTV |
Article 74-3 of the Framework Act on the Management of Disasters and Safety (Request for Information, etc.) |
Disaster Response |
Central Disaster and Safety Countermeasures Headquarters or Local Disaster and Safety Countermeasures Headquarters |
b. Public transportation card usage records |
Article 74-3 of the Framework Act on the Management of Disasters and Safety (Request for Information, etc.) |
Disaster Response |
Central Disaster and Safety Countermeasures Headquarters or Local Disaster and Safety Countermeasures Headquarters |
c. Credit card, debit card, and prepaid card transaction date/time and location |
Article 74-3 of the Framework Act on the Management of Disasters and Safety (Request for Information, etc.) |
Disaster Response |
Central Disaster and Safety Countermeasures Headquarters or Local Disaster and Safety Countermeasures Headquarters |
d. Name and telephone number of the medical institution on prescriptions, and treatment date/time in medical records |
Article 74-3 of the Framework Act on the Management of Disasters and Safety (Request for Information, etc.) |
Prevention and Control of Infectious Diseases |
Korea Disease Control and Prevention Agency (KDCA) or Metropolitan/Provincial Governments |
Name, Resident Registration Number, Address, Telephone Number (including mobile phone number) |
Article 76-2 of the Infectious Disease Control and Prevention Act (Request for Provision and Confirmation of Information) |
Prevention and Control of Infectious Diseases |
Korea Disease Control and Prevention Agency (KDCA) or Metropolitan/Provincial Governments |
Prescriptions and medical records pursuant to the Medical Service Act |
Article 76-2 of the Infectious Disease Control and Prevention Act (Request for Provision and Confirmation of Information) |
Prevention and Control of Infectious Diseases |
Korea Disease Control and Prevention Agency (KDCA) or Metropolitan/Provincial Governments |
Immigration records for the period designated by the Commissioner of KDCA |
Article 76-2 of the Infectious Disease Control and Prevention Act (Request for Provision and Confirmation of Information) |
Prevention and Control of Infectious Diseases |
Korea Disease Control and Prevention Agency (KDCA) or Metropolitan/Provincial Governments |
Other information required to trace movement routes, including: |
Article 76-2 of the Infectious Disease Control and Prevention Act (Request for Provision and Confirmation of Information) |
Prevention and Control of Infectious Diseases |
Korea Disease Control and Prevention Agency (KDCA) or Metropolitan/Provincial Governments |
a. Credit, debit, and prepaid card transaction records under the Specialized Credit Financial Business Act |
Article 76-2 of the Infectious Disease Control and Prevention Act (Request for Provision and Confirmation of Information) |
Prevention and Control of Infectious Diseases |
Korea Disease Control and Prevention Agency (KDCA) or Metropolitan/Provincial Governments |
b. Public transportation card usage records under the Act on the Promotion of Public Transportation Use |
Article 76-2 of the Infectious Disease Control and Prevention Act (Request for Provision and Confirmation of Information) |
Prevention and Control of Infectious Diseases |
Korea Disease Control and Prevention Agency (KDCA) or Metropolitan/Provincial Governments |
c. Video information collected through video information processing devices under the Personal Information Protection Act |
Article 76-2 of the Infectious Disease Control and Prevention Act (Request for Provision and Confirmation of Information) |
Protection of Persons at Risk of Suicide |
Police Agencies |
Name, Resident Registration Number (or date of birth if unavailable), Address, Telephone Number, ID, Email Address, and Personal Location Information of the person requiring emergency rescue |
Article 19-3 of the Suicide Prevention Act (Request for Provision of Information for Rescue of Emergency Rescue Targets) |
|
Protection of Persons at Risk of Suicide |
Korea Coast Guard |
Name, Resident Registration Number (or date of birth if unavailable), Address, Telephone Number, ID, Email Address, and Personal Location Information of the person requiring emergency rescue |
Article 19-3 of the Suicide Prevention Act (Request for Provision of Information for Rescue of Emergency Rescue Targets) |
|
Protection of Persons at Risk of Suicide |
Fire Departments |
Name, Resident Registration Number (or date of birth if unavailable), Address, Telephone Number, ID, Email Address, and Personal Location Information of the person requiring emergency rescue |
Article 19-3 of the Suicide Prevention Act (Request for Provision of Information for Rescue of Emergency Rescue Targets) |
|
Processing of Personal Information Related to Crimes such as Kidnapping or Illegal Confinement |
Police Agencies |
Video information such as CCTV footage |
Article 18(2) of the Personal Information Protection Act (Restriction on Use and Provision of Personal Information for Purposes Other Than the Intended Purpose) |
|
Investigation Purposes |
Police Agencies |
Personal Information items requested by relevant authorities |
Article 199 of the Criminal Procedure Act (Measures Necessary for Investigation) |
|
Investigation Purposes |
Korea Coast Guard |
Personal Information items requested by relevant authorities |
Article 199 of the Criminal Procedure Act (Measures Necessary for Investigation) |
|
Investigation Purposes |
Prosecution Service |
Personal Information items requested by relevant authorities |
Article 199 of the Criminal Procedure Act (Measures Necessary for Investigation) |
|
Investigation Purposes |
National Intelligence Service |
Personal Information items requested by relevant authorities |
Article 199 of the Criminal Procedure Act (Measures Necessary for Investigation) |
In accordance with Article 28-8(1)3 of the Korean Personal Information Protection Act, the Company may transfer your Personal Information to, or entrust the processing of such Personal Information to, organizations located outside the Republic of Korea.
|
Recipient |
Country |
Timing and Method of Transfer |
Personal Information Transferred |
Purpose |
Retention |
Contact of Data Protection Officer |
|
AMADEUS |
Spain |
Transmitted via network at the time of service use |
Name, Date of birth, Gender, Contact information, Email, Emergency contact, Passport number, Nationality, Passport issuing country, Passport expiration date, Card number, Expiration date, (for virtual account payment) Transaction authentication number, (for bank transfer) Transaction number |
Processing and confirmation of reservations and provision of payment services |
Within 5 years from the date of provision or until the termination of the contract |
|
Asiana Sabre |
United States |
Transmitted via network at the time of service use |
Name, Date of birth, Gender, Contact information, Email, Emergency contact, Passport number, Nationality, Passport issuing country, Passport expiration date, Address of stay, ZIP code |
Processing and confirmation of reservations and provision of payment services (for card payments) |
Within 5 years from the date of provision or until the termination of the contract |
|
|
Korean Air, Asiana Airlines, and other domestic and international airlines
[View Details] |
Varies by airline |
Transmitted via network at the time of service use |
[Booker] Name, Email, Mobile phone number, Card information (card number, expiration date, first two digits of card password) [Traveler] Name, Date of birth, Gender, Email, Mobile phone number, Nationality, Passport information (passport number, expiration date, country of issue), Address of stay, Airline mileage number Additional for refund requests: Bank name, Account number, Account holder |
Airline ticket reservation, issuance, payment services, and verification of eligibility for departure |
Until the termination of the travel contract or for the period required under applicable laws and regulations |
Refer to the relevant airline’s website |
|
Cruise Partners
[View Details] |
Varies by partner |
Sent via email at the time of service use |
[Booker] Name, Email, Mobile phone number, Card information (card number, expiration date, first two digits of card password) [Traveler] Name, Date of birth, Gender, Email, Mobile phone number, Nationality, Passport information (passport number, expiration date, country of issue) Additional for refund requests: Bank name, Account number, Account holder |
Cruise reservation and verification of eligibility for departure |
Until the termination of the travel contract or for the period required under applicable laws and regulations |
Refer to the relevant partner’s website |
|
HANKOOK HAWAII, INC. (Local Tour Operator) |
United States |
Sent via email at the time of service use |
[Traveler] Name, Contact information, Date of birth, Email, Passport information (passport number, expiration date) |
Event operation and customer management |
Until the termination of the travel contract or for the period required under applicable laws and regulations |
|
|
SIXT |
Germany / United States |
Transmitted via network at the time of service use |
For rental car reservations: Name, Email address, Mobile phone number, Flight number For chauffeur service reservations: Name, Email address, Mobile phone number, Billing address, (for card payments) Card number, Expiration date |
Reservation processing and confirmation, and provision of payment services |
Within 5 years from the date of provision or until the termination of the contract |
|
|
Linktivity |
Japan |
Transmitted via network at the time of service use |
Name, Date of birth For transfer reservations: Accommodation information, Arrival/departure date information, Local contact information For reservations including meals: Allergies For diving experience reservations: Possession and level of diving certification When participation eligibility verification is required: Health condition |
Activity reservations and individual service bookings |
Within 5 years from the date of provision or until the termination of the contract |
|
|
Japan |
Transmitted via network at the time of service use |
Name |
JR Pass reservation and issuance |
10 years from the date of provision |
Purpose | Legal Basis | Retention |
Records related to contracts or withdrawal of subscription (cancellation) | Article 6 of the Act on the Consumer Protection in Electronic Commerce | 5 years |
Records related to payment and supply of goods or services | Article 6 of the Act on the Consumer Protection in Electronic Commerce | 5 years |
Records related to consumer complaints and dispute resolution | Article 6 of the Act on the Consumer Protection in Electronic Commerce | 3 years |
Records related to labeling and advertising | Article 6 of the Act on the Consumer Protection in Electronic Commerce | 6 months |
Records related to access logs | Article 15-2 of the Protection of Communications Secrets Act | 3 months |
※ Requests to access or otherwise exercise rights regarding the Personal Information of children under the age of 14 must be made directly by their legal representatives.
For minors aged 14 or older, the data subject may exercise such rights directly or through a legal representative.
|
Category |
Personal Information Protection Officer (CPO) |
Person in Charge of Personal Information Protection |
|
Name |
Lee, Junyoung |
Kim,Nay |
|
Department |
Management Support Division |
IT Planning |
|
Telephone |
1577-6511 |
02-6313-8034 |
|
FAX |
02-6313-8592 |
|
|
|
||
|
Address |
13Fl, Central Place, 50, Seosomun-ro, Jung-gu, Seoul, 04505, Korea |
|
Data subjects may apply for dispute resolution, consultation, or other remedies regarding Personal Information infringement to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA), or other relevant institutions.
For reports or consultations related to Personal Information infringement other than those listed below, please contact the relevant institutions as follows:
Telephone: (No area code) 1833-6972, Website: https://www.kopico.go.kr
Telephone: (No area code) 118, Website: https://privacy.kisa.or.kr
Telephone: (No area code) 1301, Website: https://www.spo.go.kr
Telephone: (No area code) 182, Website: https://ecrm.cyber.go.kr
11.7 Malaysia
11.8 Indonesia
Purpose | Legal Basis |
To provide services you have asked us to provide to you. This includes managing your payments, making necessary notifications and responding to your inquiry. | The processing is necessary to perform a contract or to take steps, at your request, prior to entering into a contract with you. |
To analyse your use of the service in order to improve and develop our services, marketing strategy and business. | The processing is necessary for the purposes of the legitimate interests. |
To provide you with news, offers, promotions and advertisements via email or online advertisements. | Consent. You can withdraw your consent at any time by sending an e-mail to request for withdrawal to us |
To provide you with tailored news, offers, promotions and advertisements based on profiling of your interests and preferences via email or online advertisements. | Consent. You can withdraw your consent at any time by sending an e-mail to request for withdrawal to us |
To protect interests and legal rights of us and our users. | The processing is necessary for the purposes of the legitimate interests. |
To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar in accordance with our legal and regulatory obligations under the applicable law. | The processing is necessary for compliance with a legal obligation to which the controller is subject. |
To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar in accordance with our legal and regulatory obligations under the applicable laws other than Indonesian laws. | The processing is necessary for the purposes of the legitimate interests. |
Under Personal Data Protection Law of Indonesia, subject to certain exceptions, you may have the following rights regarding your Personal Information in addition to the rights listed in Section 8:
11.9 Thailand
11.10 India
11.11 Philippines
Purpose | Legal Basis |
To provide services you have asked us to provide to you. This includes managing your payments, making necessary notifications and responding to your inquiry. | The processing is necessary to perform a contract or to take steps, at your request, prior to entering into a contract with you. |
To analyse your use of the service in order to improve and develop our services, marketing strategy and business. | The processing is necessary for the purposes of the legitimate interests. |
To provide you with news, offers, promotions and advertisements via email or online advertisements. | Consent. You can withdraw your consent at any time by sending an e-mail to request for withdrawal to us |
To provide you with tailored news, offers, promotions and advertisements based on profiling of your interests and preferences via email or online advertisements. | Consent. You can withdraw your consent at any time by sending an e-mail to request for withdrawal to us. |
To protect interests and legal rights of us and our users. | The processing is necessary for the purposes of the legitimate interests. |
To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar in accordance with our legal and regulatory obligations under the applicable law. | The processing is necessary for compliance with a legal obligation to which the controller is subject. |
To respond to requests from government or public authorities, law enforcement officials, courts, regulators or similar in accordance with our legal and regulatory obligations under the applicable laws other than Philippine laws. | The processing is necessary for the purposes of the legitimate interests. |
11.12 Vietnam
You have the right to be informed of the processing of your Personal Information, unless otherwise provided for by law.
You have the right to give consent to the processing of your Personal Information, except for the case provided for by law.
You have the right to access your Personal Information in order to view, correct or request correction of your Personal Information, unless otherwise provided for by law.
You have the right to withdraw your consent, unless otherwise provided by law.
You have the right to delete or request deletion of your Personal Information, unless otherwise provided for by law.
You have the right to request to restrict the processing of your Personal Information, unless otherwise provided for by the law.
The restriction on the processing of Personal Information shall be implemented with all Personal Information that you request the restriction within 72 hours after receiving your request, unless otherwise provided for by law.
You may request us to provide you with your Personal Information, unless otherwise provided by law.
You have the right to object to us processing your Personal Information in order to prevent or restrict the disclosure of Personal Information or the use of Personal Information for advertising and marketing purposes, unless otherwise provided for by law.
We shall comply with your request within 72 hours after receiving the request, unless otherwise provided for by law.
You have the right to lodge complaints, denunciations or initiate lawsuits in accordance with law.
You have the right to self-protection in accordance with the provisions of the Vietnamese Civil Code (Law No. 91/2015/QH15, as amended or supplemented (if any)), other relevant laws and Decree No. 13/2023/ND-CP (as amended or supplemented (if any), “Decree 13”), or request competent agencies and organizations to take measures to protect civil rights as prescribed in Article 11 of the Vietnamese Civil Code.
Please be advised that it cannot be denied that Personal Information we collect might include your sensitive personal data defined under Decree 13.
11.13 Taiwan
11.14 New Zealand
11.15 Brazil
Contact: E-mail: privacy@lottejtb.com
Last Revised: March 31, 2026
Effective Date: May 1, 2026