베스트루이스해밀턴호텔 오션테라스(hereinafter referred to as the "Company") has established the following privacy policy to protect users' personal information and rights in accordance with the Personal Information Protection Act when using the website (blhothotel.com) and related services, and to handle users' grievances smoothly.
1. Consent to the Collection of Personal Information
The Company provides a procedure for users to agree to the collection and use of personal information when applying for individual services. Users can refuse consent, but refusal may restrict the use of the relevant services.
2. Purpose of Collection and Use of Personal Information
The purposes for which the Company collects and uses users' personal information are as follows
| Category |
Purpose of Use |
| Inquiry |
Verification of intention according to online inquiry, identity verification, prevention of fraudulent use of services, various notifications and guidance, and record preservation for dispute resolution |
3. Personal Information Collection Items and Methods
The Company collects only the essential information required to provide basic services. Optional information can be left blank without limiting the use of the service. The Company does not use the collected information for purposes other than those stated.
| Category |
Collection and Use Items |
| Inquiry |
(Required) Inquiry type, name, contact information, email, contact information, inquiry details |
The Company collects personal information through the completion of application forms on the website by users.
4. Retention and Use Period of Personal Information
The Company processes and retains users' personal information for one year from the date of consent to the collection and use of personal information. However, if it is necessary to retain personal information for a certain period according to the provisions of related laws, the information will be retained for that period, and access to and use of the retained information will be restricted for the relevant reasons.
5. Entrustment or Provision of Personal Information to Third Parties
- The Company does not provide users' personal information to third parties, including other individuals, companies, or institutions. The Company does not entrust users' personal information.
- If it becomes necessary to entrust personal information for service improvement in the future, users will be notified in advance, and the Company will manage the entrusted party through an outsourcing contract.
6. Procedures and Methods for Destroying Personal Information
- In principle, if the purpose of processing personal information is achieved, and the personal information processing is deemed unnecessary, or if the user requests the destruction of personal information, the Company will promptly destroy the relevant personal information. The procedures, deadlines, and methods for destruction are as follows:
- Information subject to destruction is transferred to a separate database (DB) or document file after the purpose is achieved and is destroyed without delay according to internal policies and other relevant laws. Personal information transferred to a separate DB or document file is not used for any other purpose except as required by law.
- Personal information is destroyed within 5 days from the end of the retention period or within 5 days from when it is recognized that the information is no longer necessary due to the achievement of the processing purpose, discontinuation of the relevant service, or termination of the business.
- Information stored in electronic file format is deleted using technical methods that prevent record reproduction, and information printed on paper is shredded with a shredder.
7. 7. Rights and Obligations of Information Subjects and Legal Representatives and How to Exercise Them
-
Information subjects can exercise the following rights against the Company at any time:
- Right to request access to personal information
- Right to request correction or deletion of personal information
- Right to request the suspension of processing personal information
- Right to withdraw consent to the collection, use, etc., of personal information
- Information subjects can request access, correction, deletion, suspension of processing, withdrawal of consent, or destruction of personal information from the personal information protection officer listed below, and the Company will take necessary measures without delay.
- The rights under items 1 and 2 must be exercised by the information subject themselves. If the information subject’s legal representative or an entrusted person wishes to exercise these rights, the Company may request additional documents such as a power of attorney.
- Information subjects must not use or infringe upon their or others' personal information in violation of personal information protection laws and must manage their information under their responsibility.
8. Methods of Notification or Notice of Privacy Policy
If the Company uses personal information beyond the scope of the user's consent or provides it to a third party, it will obtain the user's additional consent individually. If the Company entrusts the processing of personal information to another party, it will notify this in advance through the privacy policy on the website.
9. Technical and Managerial Measures for Personal Information Protection
- Establishment and implementation of an internal management plan: The Company has established and is implementing an internal management plan for the safe processing of personal information.
- Technical measures against hacking, etc.: The Company installs security programs, performs periodic updates and checks to prevent personal information leakage and damage caused by hacking or computer viruses.
- Training of personal information processing staff: Personal information processing staff are composed of the minimum number of people, and the Company provides regular training and prepares internal procedures regarding personal information protection obligations.
10. 10. Personal Information Protection Officer
The Company appoints a personal information protection officer to protect users' personal information and handle complaints.
| Name |
|
| Position |
Personal Information Protection Officer |
| Phone |
|
| E-mail |
|
11. 11. Changes to the Privacy Policy
This privacy policy was established on September 23, 2022.
This privacy policy will be applied from the effective date. In case of any additions, deletions, or corrections to the content according to laws and policies, the changes will be notified to users 7 days before the effective date, and in case of significant changes that are disadvantageous to users, they will be notified 30 days before the effective date.
