Okitour

Personal Information Protection Policy

Okitour's service ('https://www.okitour.co.jp' hereinafter referred to as 'Okitour') provides the following policy to protect the personal information and rights of users in accordance with the Personal Information Protection Act, and to smoothly handle complaints from users related to personal information.

1. Items of personal information to be collected and collection method

A. Personal information collection items

Okinawa collects the following personal information to provide basic services such as membership registration, smooth consultation, e-mail subscription, and various services.

Required items: ID, password, name, e-mail

Optional items: mailing service reception, information disclosure

I. Automatic collection items

The following information may be automatically generated and collected during the user's service use process or business process.

Automatic collection items: IP address, cookie, visit date and time, service use record, bad use record

U. Personal information collection method

Okitour collects personal information in the following ways.

1) Website use: Membership registration, member information modification, service use, etc.

2) E-mail subscription: When subscribing to receive regular e-mails

3) Event application: When customer information is entered to issue promotional codes, etc.

2. Purpose of collection and use of personal information

Okitour uses collected personal information for the following purposes.

A. Membership management

Identification, personal identification, confirmation of intention to join and withdraw from membership services, member information management, prevention of fraudulent use by bad members and unauthorized use, record keeping for dispute settlement, complaint handling, etc., notification

B. Service provision and management

Identification and personal identification for service provision and fee-based service charging

C. Development of new services and statistics on service usage

Development of new services, provision of tailored services, provision of services based on statistical characteristics, confirmation of service effectiveness, understanding of access frequency, statistics on members' service usage

3. Entrustment of handling of personal information

Okitour manages customers' personal information directly and does not entrust the handling of personal information.

4. Period of retention and use of personal information

Okitour will destroy the information if a member requests withdrawal, withdraws consent to the collection and use of the personal information provided, or if the purpose of collection and use is achieved or the retention and use period ends. However, the following information will be retained for the period specified below, in accordance with the provisions of relevant laws and regulations.

A. Reasons for information retention according to relevant laws and regulations

Okitour will retain members' personal information for a certain period of time as stipulated by relevant laws and regulations and internal policies. In this case, Okitour will use the retained information only for the purpose of retention, and the retention period is as follows:

1) Records related to contracts or service usage, etc.

- Reason for storage: Law on Consumer Protection in Electronic Goods Transactions, etc.

- Storage period: 5 years

2) Records related to electronic financial transactions

- Reason for storage: Law on Consumer Protection in Electronic Goods Transactions, etc.

- Storage period: 5 years

3) Records related to consumer complaints and dispute resolution

- Reason for storage: Law on Consumer Protection in Electronic Goods Transactions, etc.

- Storage period: 3 years

4) Records related to identity verification

- Reason for storage: Law on Promotion of Information and Communications Network Utilization and Information Protection, etc.

- Storage period: 6 months

5) Information retention according to internal policy

- Reason for storage: Information retention for smooth email forwarding when subscribing to email.

- Retention period: Until the deletion request of the individual.

A. Items to be stored

1) Member information on the homepage: Member ID, password, name, email, date of birth, IP address, service usage record, bad usage record

2) Email subscription information: Name, email address

5. Procedures and methods for destroying personal information

OkiTour Co., Ltd. will destroy personal information after the purpose of collecting and using the information has been achieved. The procedures and methods for destroying personal information are as follows.

A. Destruction procedures

Information entered for member registration, etc. will be transferred to a separate database after the purpose has been achieved (separate document box for paper) and will be stored for a certain period of time according to internal policies and other relevant laws and regulations for information protection reasons (see retention and use period). Personal information transferred to a separate database will not be used for purposes other than retention unless required by law.

B. Destruction method

1) Personal information printed on paper will be crushed in a grinder or destroyed by incineration.

2) Personal information stored in the form of electromagnetic files will be deleted using technical methods that make the records unrecoverable.

6. Sharing and provision of personal information

Okitour Co., Ltd. will not, in principle, disclose a member's personal information to the outside world without the member's prior consent. However, there are exceptions in the following cases.

A. When the member agrees to the disclosure of information in advance.

B. When the member agrees to the disclosure in advance at the request of Okitour Co., Ltd.

C. When there is sufficient reason to determine that personal information must be disclosed in order to take legal action against a person who has caused mental or material harm to others through the use of the service.

D. When it is determined in good faith that it is required by other laws.

(e.g. when there is a request from a government agency through legal procedures based on relevant laws)

7. Rights of users and legal representatives and how to exercise them

Members and legal representatives may inquire or modify their registered personal information at any time, and may apply to withdraw from membership.

A. Modifying Member Information and Withdrawing from Membership

To inquire about or modify your personal information, select "Modify Information." To withdraw from membership, select "Withdraw from Membership." After completing the identity verification procedure, you can directly view, modify, or withdraw from membership. Alternatively, if you contact the Personal Information Manager in writing, by phone, or by email, we will deal with your request without delay.

B. Correcting Errors in Member Information

If a member requests to correct an error in their personal information, the personal information will not be used or provided until the correction is completed.

C. Retention of Member Information

Okitour Co., Ltd. processes personal information that has been withdrawn or deleted at the request of a member or legal representative as specified in "4. Period of Retention and Use of Personal Information" and does not allow it to be viewed or used for other purposes.

8. Matters Concerning the Installation, Operation, and Rejection of Automatic Collection Devices for Personal Information

Okitour Co., Ltd. operates "cookies" that store and search for member information at any time in order to provide services specialized for members. Cookies are a small amount of information sent to the user's computer browser by the server (HTTP) used to operate the Assistant Chat website, and are stored in the storage space of the customer's device according to the user's web browser. Okitour Co., Ltd. uses cookies for the following purposes.

A. Purpose of cookies

Used to provide more convenient services by identifying the visits and usage patterns, connection frequency, etc. of members and non-members for each service.

B. Installation, operation, and refusal of cookies

Users have the right to choose whether or not to install cookies. By setting options in the "Tools > Internet Options > Personal Information" function at the top of the web browser, you can allow all cookies, have confirmation each time a cookie is saved, or refuse to save all cookies. However, if you refuse to save cookies, you may have difficulty using some services that require login.

9. Technical/management protection measures for personal information

Okitour Co., Ltd. takes the following technical/management measures to ensure safety in handling members' personal information so that personal information is not lost, stolen, leaked, altered, or damaged.

A. Password encryption

Members' personal information is stored and managed by encrypting the PIN code, and is thoroughly protected. Only the member knows the member's password, and only the member who knows the password can view and change the personal information.

B. Measures against hacking, etc.

Okitour Co., Ltd. does its best to prevent the leakage or damage of members' personal information due to hacking or computer viruses. In case of damage to personal information, we back up materials at any time, and use the latest vaccine programs to prevent the leakage or damage of members' personal information and materials, and we ensure the safe transfer of personal information over the network through encrypted communication (SSL).

C. Minimization and education of handling staff

Okitour Co., Ltd. limits the handling of members' personal information to the person in charge, assigns a separate password for this purpose and updates it regularly, and operates a firewall to prevent access from unauthorized locations. We also constantly emphasize compliance with the personal information handling policy through regular education for personnel. Okitour Co., Ltd. checks whether the personal information handling policy is being implemented and whether the person in charge is complying with it, and if any problems are found, we will immediately make corrections and make them happen.

However, Okinawa will not be held responsible for any problems that arise from the leakage of personal information such as member IDs and PINs due to the member's own negligence or problems on the Internet.

Okitour Co., Ltd. basically recommends that you log out online and close the web browser after finishing using the computer. In particular, if you share your PC with others or use it in a public place, you will need to take the above steps to prevent your personal information from being known by others.

10. Personal Information Manager and Person in Charge

Okitour Co., Ltd. has designated the following personal information manager to protect members' personal information and to collect opinions and handle complaints about personal information.

Personal Information Protection Manager

Name/Position: Kwon Sun-woo/CEO

Email: help@okitour.co.kr

You can report any complaints related to personal information protection that arise while using the assistant chat service to the personal information manager. We will promptly provide a satisfactory response to your reported matters.

11. Obligation to notify

If there are additions, deletions, or modifications to the current personal information handling policy, they will be notified via the "Notice" section of the Oki Tours website at least 7 days prior to the revision.

Announcement date: November 12, 2018

Effective date: November 12, 2018