Asiana Airlines’ Privacy Policy for its website users

Asiana Airlines Co., Ltd.’s (hereinafter referred to as Asiana) privacy policy for its website users concerns the management and operation of private information about its members.

1. [General Provisions]
A. Asiana shall collect from its users the minimum level of private information required to provide them with ample services, facilitate communications with them, and retain optimum levels of information. Asiana shall value the private information collected from its members, observe the provisions regarding the protection of privacy stipulated in the law pertaining to the promotion of the use of telecom networks and the protection of privacy, etc., and follow the privacy guidelines enacted by the Ministry of Information and Communication.  

B. Asiana shall disclose its privacy policy on its website so as to inform members of how and for what purposes their private information is being used and managed, and shall disclose the measures that are currently taken to protect their private information. 

2. [Purpose of Collecting Private Information and Its Usage]
A. Asiana shall collect private information for the following purposes:
- The establishment of an agreement for providing services (identifying the person concerned, confirming the opinion of the person concerned, etc.);
- The execution of services (delivery of products and services, settlement of payment, etc.);
- The provision of information on new services, new products, and forthcoming events. 

B. Asiana shall only use private information that is collected with your full agreement, for the aforementioned purposes, and shall obtain your prior agreement in the event of using it for any purpose which falls outside the scope of the prescribed purposes. 

3. [Items of Private Information and Method of Collection]
A. Asiana shall collect the mandatory private information required for to obtain membership, with certain optional items of information left to the applicant’s choice. 

(1) Mandatory private information required from applicants for membership:
- Name (English and/or Korean);
- Citizen registration number (Korea residents only) ;
- Address and telephone number;
- E-mail address;
- Internet ID and password, and a hint to remember your password.

(2) Optional information 
- Areas of interest;
- Nations and cities to which you frequently travel, etc.

B. You can agree or not agree with Asiana’s Privacy Policy or service agreement by clicking the Agree or Do Not Agree button, expressing either your agreement or disagreement with the collection of your private information. By clicking on the Agree button, you shall be regarded as being in agreement with the collection of your private information.

4. [Use of Private Information Outside the Prescribed Purposes and Its Provision to Third Parties]
A. Unless otherwise stipulated under the relevant laws, Asiana shall not provide your private information to any third parties whatsoever without your full and prior agreement. 

B. In the event that you commit any wrongdoing or misdemeanor such as violating the service agreement and/or causing damage to others, thereby requiring Asiana to take due legal action or leading to a demand for the provision of your private information to the relevant law enforcement authorities, Asiana may provide your private information to the related agency without your prior agreement.

C. In the event that Asiana outsources the work of managing your private information to a third party in order to better serve you, it shall issue a prior announcement of the name of the chosen service provider, as well as the scope of the private information to be subjected to the outsourced management, the outsourcing period, the scope of the outsourcing, and other factors.

D. Asiana may provide your private information to its partnered parties or share it with the latter in order to better serve you. However, Asiana shall inform you by e-mail or in writing of the partnered firm in question, which items of your private information are to be provided or shared, the reason why such private information has to be provided or shared, and until when and how your private information should be protected and managed, thereby seeking your agreement. If you do not agree to the aforementioned provisions, Asiana shall not provide your private information to its partnered firms or share it in any way or form with the latter. 

E. Under each of the following circumstances, Asiana may provide your private information to the relevant party in accordance with the relevant laws. Likewise, in this case, Asiana shall ensure that your private information is not provided without discretion and in contradiction of the prescribed purposes of collecting and using it.

(1) In the event that the payment for the services provided has been settled;

(2) In the event that your private information is required for statistical compilation, academic research or market surveys; provided that it is presented in such a form that the identity of the private member whose information is being provided cannot be recognized by particular individuals;

(3) In the event that the provision of your information is required in accordance with such laws as the Law on Real-name Financial Transaction and the Protection of Confidentiality, the Law on the Use and Protection of Credit Information, the Law on Electrical and Telecom Businesses, the Basic Law on Electricity and Telecom, and the Law on Criminal Lawsuits.

5. [Access to and Amendment of Private Information]
A. You may access or amend your registered private information at any time. You may access or amend your private information after clicking Amend Member Information and undergoing the identity confirmation procedure of the person concerned, or you may amend your information by placing a request, by telephone or by email, with the Customer Voice Corner or the staff responsible for managing the private information. 

B. In the event that you request the correction of errors in your private information or its amendment, Asiana shall not use your private information until after any such correction or amendment has been completed.
 
6. [Withdrawal from the Agreement to Collect, Use and Provide Private Information]
A. You may withdraw from your agreement regarding the collection, use and provision of your private information at any time. 

B. You may withdraw from your agreement by accessing the website and clicking Amend Member Information, or phoning or requesting by email the Customer Center or the staff in charge of managing private information. 

C. You can at any time withdraw from Asiana’s membership if you do not intend to receive its services; and the procedure for withdrawal from the membership is the same as that required for withdrawal from the agreement. 

7. [Retention of Private Information and Its Usage Period]
A. Asiana shall retain and use the private information provided by you, the user, while you receive its services. 

B. Under any of the following circumstances, your private information shall be immediately deleted and destroyed, and shall not be restored or used by any means or under any circumstances. 
- Information submitted for joining the membership: in the event that you withdraw from the membership or are disqualified; 
- Information regarding payment for services: in the event that the complete settlement of payment is made or the extinctive prescription period for credit expires; and 
- Information of delivery: in the event that the product is delivered or the service is provided. 

C. Notwithstanding the foregoing provisions, Asiana shall specify and announce the purpose of retention, the retention period, and the retained items of private information in the event that it sees fit to continue to retain the member’s private information in preparation for the settlement of payment for service charges, lawsuits or other legal disputes. 

8. [Technical Measures for the Protection of Private Information]
Asiana shall take the following technical measures in order to prevent your private information from being lost, stolen, leaked, attacked, hacked, or damaged in any other way, and shall ensure its safety using the best available means.  

(1) Asiana shall protect your private information by employing your password, encrypted files and transmission data, and shall protect your important data through separate security functions. 

(2) Asiana shall employ vaccine programs to prevent the types of damage caused by computer viruses, and shall regularly update and advance its vaccine programs. 
 
(3) Asiana shall use encryption algorithms and ensure a security system for the safe transmission of private information over its networks. 

(4) To protect your private information from being leaked either by hacking or by other forms of attack, Asiana shall use systems that have been designed to shield private information from external intrusions, and monitor intrusion attempts through its monitoring systems on a 24-hours-a-day basis.

(5) Asiana shall minimize the number of its staff responsible for handling your private information, continue to provide security education to the related staff, and carry out periodic checks to verify that staff members are performing their duties in such a way that is fully compliant with the relevant information security policy. 
 9. [Right and Duties of Website Users]
A. You shall accurately record your private information and always keep it up-to-date so as to prevent unexpected accidents. You shall be held liable for any accidents arising from an incorrect recording of your private information.  

B. You shall have the right to your private information being protected, and shall fulfill your obligation to not to intrude upon the private information of other members. You shall ensure that your password and private information are not leaked to another person or party, and may lose your membership qualifications and/or be punished pursuant to the related laws in the event that you steal another person’s information or record incorrect or false information.

10. [Non-Application of Private Policy]
Asiana can provide you with links to different companies’ websites or data. Accordingly, Asiana shall not exercise any control over such external websites and their data, and shall not apply its privacy policy to these providers’ collection of private information. Thus, when you click on a link provided by Asiana and move to a different website, you shall be obliged to confirm its privacy policy. 

11. [Amendment of Privacy Policy]
Asiana’s privacy policy may be subject to change in accordance with the related laws, such as the Law on the Promotion of the Use of Telecom Networks and the Protection of Privacy, etc, the Law on the Use and Protection of Credit Information, and the government’s corresponding guidelines; likewise, Asiana’s service agreement or policy may also be subject to change. Accordingly, Asiana shall disclose the reason for any such amendment, its outline, and purpose, etc, and shall obtain your agreement to the following major changes: the provision of your private information to a third party, changes in the purpose of collection and use of private information, and changes in the retention period.