Privacy Policy of Goldis Trip
Goldis Trip (hereinafter referred to as the "Company") complies with the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, among other applicable laws, and strives to protect users' personal information. Through this Privacy Policy, the Company informs users about the collection and use of personal information, including the types collected, purposes of use, third-party sharing, retention periods, rights to refuse consent, changes to the policy, and protective measures.
Contents
1.
Categories and Methods of Personal Information Collection
2.
Purpose of Personal Information Collection and Use
3.
Provision and Entrustment of Personal Information to Third Parties
4.
Retention and Use Period of Personal Information
5.
Right to Refuse Consent and Possible Disadvantages
6.
Notification of Changes to the Privacy Policy
7.
Technical and Managerial Protection Measures
8.
Personal Information Protection Officer and Contact Information
1. Categories and Methods of Personal Information Collection
The Company collects only the minimum necessary personal information required to provide services.
Collected Items:
•
Name
•
Contact Information (Phone Number, etc.)
•
Email Address
•
Date of Birth
•
Nationality
•
Passport Number
Collection Methods:
•
Direct input by users during membership registration or travel booking on the Goldis Trip website
•
Collection through reservation inquiries or customer support via phone or email
•
Collection via written forms during offline events and promotions
2. Purpose of Personal Information Collection and Use
Collected personal information is used for the following purposes:
•
Reservation and Service Provision:Â Processing of travel reservations and provision of travel services such as flight and accommodation bookings
•
Customer Support:Â Handling inquiries, resolving complaints, and general communication with customers
•
Marketing and Promotions:Â Providing information on events and promotional offers (only with separate user consent)
•
Service Improvement:Â Statistical analysis and research to improve service quality and develop new services
3. Provision and Entrustment of Personal Information to Third Parties
(1) Provision of Personal Information to Third Parties
In principle, the Company does not provide users' personal information to third parties. However, exceptions apply in the following cases:
•
When the user has given prior consent (e.g., providing necessary booking information to affiliated partners such as airlines and hotels)
•
When required by law (e.g., upon legal request by investigative agencies)
In cases where information must be provided to third parties, the Company will clearly inform the user in advance about the recipient, purpose, and details, and will obtain consent.
(2) Entrustment of Personal Information Processing
To provide efficient services, the Company may entrust part of its personal information processing tasks to professional external service providers. For example, it may use an email service provider for newsletter delivery or a payment gateway (PG) company for payment processing.
In such cases, the Company will sign confidentiality agreements with the service providers and supervise them to ensure safe handling of personal information. If there are changes to the entrusted tasks or service providers, the Company will notify users through this Privacy Policy or other means.
4. Retention and Use Period of Personal Information
The Company retains and uses collected personal information for the period prescribed by law or as agreed by the user. Once the retention period has passed or the purpose of collection and use is fulfilled, the information is promptly destroyed.
However, some information may be retained for a certain period in accordance with applicable laws. For instance, under the Act on Consumer Protection in Electronic Commerce:
•
Records related to contracts or cancellations are retained for 5 years
•
Records related to payment and supply of goods are retained for 5 years
•
Records of customer complaints and dispute resolutions are retained for 3 years
When personal information is no longer needed, it is irreversibly destroyed. Electronic files are permanently deleted, and paper documents are shredded or incinerated.
5. Right to Refuse Consent and Possible Disadvantages
Users have the right to refuse consent to the collection and use of personal information. However, refusal to provide essential information may result in limitations in service use, such as booking processing. Non-provision of optional information will not affect basic service usage. The Company clearly informs users about their right to refuse and any possible disadvantages.
6. Notification of Changes to the Privacy Policy
If this Privacy Policy is amended, the Company will notify users in advance through its website or other appropriate means. In case of significant legal or technical changes, updated terms will be announced, and if necessary, individually notified to users. The revised policy takes effect on the date specified in the notice.
7. Technical and Managerial Protection Measures
To ensure the safety of personal information, the Company implements the following protective measures:
•
Encryption:Â Important information is encrypted during storage and transmission
•
Security Measures:Â Anti-virus software is installed and updated, and firewalls and intrusion prevention systems are used to block unauthorized access
•
Access Control:Â Access to personal information is limited to authorized personnel, and access rights are strictly managed
•
Employee Training:Â Regular training and internal policies are enforced to ensure compliance with data protection standards
8. Personal Information Protection Officer and Contact Information
The Company designates a Personal Information Protection Officer under the Personal Information Protection Act.
•
Personal Information Protection Officer: CEO of Goldis Trip
•
Email:Â goldistrip@gmail.com
The Company will respond promptly and sincerely to all inquiries or complaints regarding personal information.