隐私政策
Hotel Lotte Co., Ltd. (hereinafter referred to as “Company”) places great importance on the personal information of LOTTE Hotels & Resorts customers (hereinafter referred to as “LOTTE Hotels”), “collects, uses, and provides personal information based on consent,” and “actively guarantees the rights of users (self-determination of personal information)”.
LOTTE Hotels complies with all applicable laws, privacy regulations and guidelines that LOTTE Hotels is obliged to comply with.
Display of main personal information processing (labeling)
-
Personal Information
Personal Information
Personal Information
[Required] Name(English), country, date of birth, contact information, e-mail, ID, etc.
[Optional] Name(Korean), etc.
※ These personal information items are collected when you sign up for a “Rewards membership". Please refer to the Privacy Policy below for more details.
-
Purpose of Processing
Purpose of Processing
Purpose of Processing
Users' personal information collected by LOTTE Hotels is only used for purposes needed to provide services, including sign up and identity verification, provision of room reservation. Whenever personal information is collected, users are notified of the processing of information and users' consent is obtained.
※ Please refer to the contents of the Privacy Policy below for more information on the purpose of processing personal information collected by LOTTE Hotels.
-
Provision to Third Parties
Provision to Third Parties
Provision to Third Parties
LOTTE Hotels does not provide personal information to a third party without prior consent from the data subject. However, if the data subject has consented to the provision of personal information for the purpose of using the services of chain LOTTE Hotels, partner companies, etc., personal information is provided to third parties.
- Local and international chain hotels of LOTTE Hotels
- LOTTE HOTEL BUSAN, etc.
※ Please refer to the contents of the Privacy Policy below on when and why LOTTE Hotels provides personal information to a third party.
-
Consignment of personal information
Consignment of personal information
Consignment of personal information
LOTTE Hotels consigns some of the tasks necessary to provide services to third party service providers and defines/manages/supervises matters that are necessary for them to process personal information safely, in accordance with the Personal Information Protection Act.
- Domestic and overseas hotel chains, Lotte Data Communication Co., Ltd., KOREA INFORMATION ＆COMMUNICATIONS CO., LTD. (KICC) , etc.
※ Please refer to the contents of the Privacy Policy below for a complete list of parties that are consigned by LOTTE Hotels to handle personal information.
-
Rights and Obligations of Information Owners
Rights and Obligations of Information Owners
Rights and Obligations of Information Owners
LOTTE Hotels guarantees the rights and obligations of the information owner when processing personal information. Data subjects may view or correct their personal information at any time and request withdrawal or termination of consent.
※ Please refer to the Privacy Policy below for more information on the rights and obligations of information owners defined by LOTTE Hotels
-
Department of Privacy Complaints
Department of Privacy Complaints
Department of Privacy Complaints
If you have any inquiries, complaints and other issues related to privacy protection that arise during the use of Lotte Hotels services, please contact the responsible department for a review of the issue and a response.
- Department in charge : information protection division
- Contact : privacy@lotte.net
※ Users can click the icons of the labels ti find detailed information of each category.
The company collects the minimum amount of personal information required for service provision.
In order to provide the following services, we collect the minimum amount of personal information through our website or using a paper form when customers sign up for membership or use a service.
Data subjects without a membership may use certain features, such as hotel search and viewing news articles, as members do. When a data subject signs up for membership to use a personalized or membership service, such as membership rate reservation, LOTTE Hotels shall collect the minimum amount of personal information required for service use.
If a data subject is under 19 years of age, he or she may not sign up for membership.
The methods we use to collect personal information are as follows.
- When collecting personal information we obtain an informed consent from the User in advance, using the following methods.
- - Collecting information directly entered by the User who consents to the collection of personal information when signing up for membership or using a service.
- - Personal information may be provided by our service provider partners or an organization, etc.
- - Information collection via websites, app pages, fax, phone, etc. in the course of service consultation.
- - Information collection from those participating in online and offline promotional events, etc.
- - Collecting information on payments and transaction of points, etc. generated during service use
The personal information collected from a data subject during service use is as follows.
- Additional personal information may be collected only from data subjects who use specific services, such as individual services within LOTTE Hotels, or when they participate in promotional events. When collecting personal information, we inform data subjects, at the time of collection, of the “items of personal information to be collected”, the “purpose of collection and use of personal information”, the “retention period of personal information”, and the “right to refuse to provide personal information and disadvantages associated with the refusal” and obtain consent.
See details of personal information collected for online services
| Category | Collection method | Items to be collected | Purpose | Retention period | |
|---|---|---|---|---|---|
| Rewards membership | Website (web/app) | Required | Name (in English), country, date of birth, contact information (mobile or home phone), e-mail, user ID, password, Rewards membership number, LOTTE Hotels (including domestic and overseas chains) reservation and service use information, points accumulation and redemption history, and IP/cookie information | Room or golf course reservation and the provision of services on subsequent visits, Identity verification and personal identification, provision of various membership services such as accumulation and use of points and discounts, establishment of effective communication channels for notifying members and handling complaints, handling of legal disputes, etc. | Until membership withdrawal, obligatory retention period by law |
| Optional | Name (in English), country, date of birth, contact information (mobile or home phone), e-mail, user ID, password, Rewards membership number, LOTTE Hotels (including domestic and overseas chains) reservation and service use information, points accumulation and redemption history, and IP/cookie information | Provision of information related to domestic and overseas LOTTE Hotels membership services, information on product discounts and new products of the Company, marketing communications, event information and participation, and advertising information via text messages and emails | |||
| Optional | Employee authentication information: Company name, company e-mail | Provision of employee service | |||
| Booker membership | Required | LOTTE HOTEL Rewards Information: Name (English), country, date of birth, contact information (mobile or home phone), email, ID, password, Rewards membership number, information on LOTTE Hotels (including local and international chains) reservations and stays (including length of stay, room rate, and purchase amount), point accumulation and use history, discount history, IP/cookie information, and mobile/e-mail account authentication Company Information: Hotel, company name, company phone number, company address, e-mail Information on LOTTE Hotels (including local and international chains) reservations and stays (including length of stay, room rate, and purchase amount), point accumulation and use history, discount history, and IP/cookie information |
Identity verification and personal identification, provision of various membership services such as point accumulation, usage, discount, etc., establishment of effective communication channels for notifying members and handling complaints, and handling of legal disputes | Until membership withdrawal | |
| Optional | Name (Korean), required items to be collected | Information relating to membership services, provision of personalized membership services and information on hotel discounts and new products, and use for marketing purposes | |||
| Room reservations | Required | Name (English/name on passport), date of birth, e-mail, contact information (mobile, home, or work phone number), credit card information (including credit card type, credit card number, and expiration date) | Provision of room reservation service, reservation-related information and notifications and mobile check-in service, payment of guarantees and penalties, handling of customer service issues such as customer complaints, prevention of any misuse, handling of legal disputes, etc. | Two years or five days from the date of cancellation if the reservation is canceled | |
| Room quick reservation service (for members) | Optional | Credit card information (card number, expiration date, card type) | Hotel room quick reservation service | One year (immediate distruction when credit card information is deleted or membership is withdrawn) | |
| mobile check-in | Required | Non-member Reservations: Name in English, e-mail, contact information, date of birth, nationality, stay and reservation details (including reservation number, length of stay, room number, room rate, and purchase amount), vehicle plate number, and payment-related information (credit card number, expiration date) | Identity verification and personal identification, provision of services such as hotel reservations/stays/customer relations, delivery of notifications, handling of customer service issues such as complaints, handling of legal disputes, etc. | Two years | |
| Required | Member reservations: Name in English, e-mail, contact information, date of birth, nationality, rewards number, stay and reservation details (including reservation number, length of stay, room number, room rate, and purchase amount), vehicle plate number, payment-related information (credit card number, expiration date) | ||||
| Restaurant reservations (LOTTE HOTEL MOSCOW, LOTTE HOTEL ST. PETERSBURG, LOTTE HOTEL YANGON) |
Required | Name (English), mobile phone number, e-mail | For reservation information and to provide services | Five days | |
| Optional | Contact Information | ||||
| Restaurant reservations (LOTTE HOTEL SEOUL,LOTTE HOTEL WORLD, LOTTE HOTEL ULSAN, LOTTE HOTEL JEJU, SIGNIEL SEOUL, SIGNIEL BUSAN) |
Required | Name (Korean or English), contact information (mobile phone number), payment history (payment, discount amount, payment date and time), IP/cookie information, LOTTE Hotels restaurant reservation and service usage information | Identity verification and personal identification, customer notifications, establishment of effective communication channels for handling complaints, handling of legal disputes, etc. | Two years | |
| Optional | E-mail, other requests | Provision of personalized services | |||
| Optional | Required items to be collected, e-mail | Notification on restaurant discount products and new menu items, and use for marketing purposes | |||
| Online sign-up for Trevi Club membership | Required | Name (Korean/English), e-mail, phone number (mobile or home phone number), date of birth, address (home or work), method of payment and payment details (credit card information, account information) LOTTE Hotels (local and Busan chain hotels), service usage details (coupons and discounts), ID, password, IP/cookie information | Provision of membership services, provision of partnership services Notification and information to members, customer service such as handling inquiries and complaints, handling legal disputes, etc. |
Until membership withdrawal | |
| Optional | Required items to be collected | Information related to LOTTE Hotels, Information on discount products and new products, For marketing purposes | |||
| Optional | Company name, job Title | Personal identification, recognition service by member, and provision of personalized services | Until membership withdrawal | ||
| Online wedding consultation | Required | Name, e-mail, contact information (mobile or home), information about wedding services, requests | Provision of reservation and consultation services | Two years (However, email and contact information will be deleted within a month.) |
|
| Inquiries about convention services (conventions) | Required | Name, e-mail, contact information, country, event information (event name, hotel choice, number of people at the event) | Provision of reservation and consultation services | ||
| Inquiries about convention services (meetings) | Required | Name, e-mail, contact information, event information (event name, hotel choice, number of people at the event) | Provision of reservation and consultation services | ||
| Service Academy Q&A | Required | Name, e-mail, contact information, requests (subject, message) | Response to customer inquiries and provision of services | One year (However, email and contact information will be deleted within a month.) |
|
| Contact us | Required | Consultation details (chain name, consultation type, message), customer information (name, e-mail, contact information) | Response to customer inquiries and provision of services, Handling customer complaints | Three years | |
| Ethics Hotline | Required | Information on whistleblower (name, contact information, e-mail), details of report (title, content) | Notification on messaging and provision of services | Three years | |
| Optional | Report information (chain name, subject of report, department, position) | Check receipt details | |||
| Chat Consultation | Website (web/app) | Required | Membership number, name, reservation number, stay record, consultation details, IP address, cookies, service usage history | Concierge service, complaint handling, customer service, consultation results | Three years |
| Login (Apple) linking service | Website (web/app) | Required | Provision of services for simple login and membership sign-up via social media | Until disconnected | |
| Login-linking (Google) service | Required | ||||
| Login-linking (Naver) service | Required | E-mail, birthday | |||
| Login-linking (Kakao) service | Required | E-mail, birthday | |||
| Login-linking (L.POINT) service | Required | E-mail, contact information (mobile) | |||
| Events | Website (web/app), e-mail | Required | Name, e-mail, phone number | Securing a channel for seamless communication for announcements about winning prizes from events, delivering notifications, handling inquiries and complaints, etc. | Agreed period |
| Name, address, (Report on public taxes and utilities) resident registration number | give prize to winners and report on public taxes and utilities | When the report is completed ※ INCOME TAX ACT Article 164 (Submission of Statement of Payment) |
|||
| e-SHOP members | Website (web/app) | Required | Name (Korean or English), contact information (mobile phone number), payment details (payment and discount amount, payment date and time), gift giving (gift recipient contact information), IP and cookie information, Lotte Hotel e-SHOP product purchase and use information | In accordance with the identity verification process according to the services provided by Lotte Hotel e-SHOP, Utilization, customer notification, product return/cancellation, securing smooth communication channels for handling complaints, handling legal disputes, etc. | Two years |
| Optional | Accumulate L.POINT (Lotte Members card number and mobile phone number) | ||||
| e-SHOP non-members | Website (web/app) | Restaurant pass | Gift to me: (Required) Orderer's name, contact information (optional) L.POINT accumulation (Lotte Members card number and mobile phone number) Give a gift: (Required) Name of orderer, contact information, LMS (gift recipient contact information) (Optional) Accumulate L.POINT (Lotte Members card number and mobile phone number) | Lotte Hotel e-SHOP product order, 1:1 bulletin board inquiry, Order cancellation/refund | Two years |
| Pickup product | Direct pickup: (Required) Orderer's name, contact information, vehicle pick-up (vehicle number) (Optional) L.POINT accumulation (Lotte Members card number and mobile phone number), requests Give a gift: (Required) Orderer's name, contact information, recipient's name, recipient's contact information, vehicle pickup (vehicle number) (Optional) L.POINT accumulation (Lotte Members card number and mobile phone number), requests | ||||
| Delivery product | Courier delivery: (Required) Orderer's name, contact information, recipient's name, contact information, shipping address (Optional) Accumulation of L.POINT (Lotte Members card number and mobile phone number), requirements for delivery/pickup | ||||
| Mileage conversion | Website (web/app) | Required | Airline mileage number, conversion points | Member mileage conversion service | One year |
※ During service use, IP addresses, cookies, records on service use, and visit history, etc., may be automatically generated and collected.
Collection and use of behavior data
| Behavior data items to be collected | User’s visit history, activity log, and search history on the service domain |
|---|---|
| Behavior data collection methods | Automatically collected and sent when the user uses the service |
| Purpose of personal information collection | Estimation based on demographic characteristics and provision of customized advertisements and content based on the user’s interests |
| Retention and use period for behavior data | Will be stored for 1 year and then destroyed |
| How to exercise user control |
Web browser: Select whether to allow cookies or not App: Android Google Settings > Advertisements > Disable Interest-based Advertisements : iOS Settings > Privacy > Advertisements > Restrict Ad Tracking |
| How to remedy damage to user |
Department in charge : Platform department Phone : 02-771-1000 |
Permissions to access information and features in apps on mobile devices
For mobile app services, The company will access information and features on mobile devices.
permissions to access information on mobile devices. In addition to the required permissions, users will be requested to grant optional permissions to the app when they try to use certain services.
Android OS and iOS may request optional permissions in different ways and no service restrictions or prohibitions will apply to the users who do not grant any permissions to the app.
| Category | Permissions | Purpose | |
|---|---|---|---|
| Android | Required | Mobile device and App version | Collection of device information and app information for convenience of usability |
| Optional | Notifications | Used to notify new packages and promotional information | |
| Storage | Save rewards online cards, attach files when using customer feedback and live chat | ||
| Camera | Used when taking photos to inquire about customer feedback and live chat | ||
| Bluetooth | Used when using mobile key service | ||
| Location | Used to search for nearby hotels based on current location | ||
| Contacts | Used to read and modify address book when using mobile key sharing | ||
| iOS | Required | Mobile device and App version | Collection of device information and app information for convenience of usability |
| Optional | Notifications | Used to notify new packages and promotional information | |
| Storage | Save rewards online cards, attach files when using customer feedback and live chat | ||
| Camera | Used when taking photos to inquire about customer feedback and live chat | ||
| Bluetooth | Used when using mobile key service | ||
| Location | Used to search for nearby hotels based on current location | ||
| Contacts | Used to read and modify address book when using mobile key sharing | ||
See details of personal information collected offline
| Category | Collection method | Items to be collected | Purpose | Retention period | |
|---|---|---|---|---|---|
| Rewards membership | In writing | Required | Name (in English), date of birth, country, mobile phone number, e-mail, membership number, LOTTE Hotels (including domestic and overseas chains) reservation and service use information, points accumulation and redemption history | Room or golf course reservation and the provision of services on subsequent visits, Identity verification and personal identification, provision of various membership services such as accumulation and use of points and discounts, establishment of effective communication channels for notifying members and handling complaints, handling of legal disputes, etc. | Until membership withdrawal, obligatory retention period by law |
| Optional | Name (in English), date of birth, country, mobile phone number, e-mail, membership number, LOTTE Hotels (including domestic and overseas chains) reservation and service use information, points accumulation and redemption history | Provision of information related to domestic and overseas LOTTE Hotels membership services, information on product discounts and new products of the Company, marketing communications, event information and participation, and advertising information via text messages and emails | |||
| Room registration card | In writing | Required | Name, date of birth, nationality, mobile phone number, e-mail, stay information | Used for identity verification procedures, customer notifications, and complaint handling | Two years from date of stay |
| Optional | Gender, country, city and province, phone number, departure date, company name, job title, preference information, request information | Personal identification, recognition service, and provision of personalized services | |||
| Optional | E-mail, mobile phone | Used for notifications regarding discount products, new products, and for marketing purposes | |||
| Signiel Club Membership | In writing | Required | Photo, name, date of birth, mobile phone number, home address | Used for identity verification procedures, customer notifications, and complaint handling | Until membership withdrawal |
| Optional | Gender, e-mail, work address, phone number, company name, job title, vehicle information | Personal identification, provision of personalized services | |||
| Optional | Address, phone number, mobile phone number, e-mail | Used for notifications regarding discount products, new products, and for marketing purposes | |||
| Trevi Club Membership | In writing, via phone, e-mail, partner company | Required | Name (Korean/English), gender, date of birth, mobile phone number, address (home and work), mailing address, card type category, payment method, membership service usage history | Identity verification and personal identification, provision of membership services, notifications and information to members, payment of annual fee, customer service such as handling inquiries and complaints, handling legal disputes, etc. | Until membership withdrawal |
| Optional | Required items to be collected, e-mail, information on the recommender, employer's name, and job title | Provision of personalized service for each member | |||
| Optional | Required and optional items to be collected | Notification on information related to membership services, hotel discount products, new products, and use for marketing purposes | |||
| Fitness Club Membership | In writing, partner company | Required | Name (Korean/English), photo, date of birth, mobile phone number, address (home, work), phone number (home, work), mailing address | Identity verification and personal identification, provision of membership services, notifications and information to members (used to contact in emergency), billing and payment of annual fee, customer service such as handling inquiries and complaints, handling legal disputes, etc. | Until membership withdrawal |
| Resident registration number | Report at the time of transfer | When the report is completed | |||
| Optional | Gender, e-mail, company name, job title, vehicle information | Personal identification, provision of personalized services | Until membership withdrawal | ||
| Optional | Address, phone number, mobile phone number, e-mail | Used for notifications regarding hotel discount products, new products, and for marketing purposes | |||
| Family Club Membership | In writing | Required | Name (Korean/English), gender, date of birth, mobile phone number, e-mail, address (home or work), phone number (home or work), mailing address, wedding anniversary | Identity verification and personal identification, provision of membership services, notifications and information to members, customer service such as handling inquiries and complaints, handling legal disputes, etc. | Until membership withdrawal |
| Optional | Required items to be collected | Provision of personalized service for each member | |||
| Optional | Required items to be collected | Notification on information related to membership services, hotel discount products, new products, and use for marketing purposes | |||
| Events | In writing | Required | Name, e-mail, phone number Products for delivery: Address | Securing a channel for seamless communication for announcements about winning prizes from events, delivering notifications, handling inquiries and complaints, etc. | Agreed period |
| Name, resident registration number, address | Report on public taxes and utilities | When the report is completed | |||
| L.POINT | Offline | Required | Name, L.POINT card number (mobile phone number) | L.POINT accrual/payment service | Five years |
| Airline mileage | Offline | Required | Name, date of stay, mileage number | Airline mileage accrual service | One year |
| Cash receipt | Offline | Required | Mobile phone number, cash receipt card number | Cash receipt issuance | Five years |
We use the minimum amount of personal information as described below on our website, in our individual membership programs, etc. during the membership sign-up process and service use.
- - Personal identification, checking the intention to sign up for membership, identity and age verification, prevention of misuse, membership management
· Verification of whether a child is under 14 years of age, or verification of personal identification at the time a legal representative exercises his/her rights
(In principle, The company does not collect any personal information from children under 14 years of age.) - - Provision of services, handling inquiries or complaints, and delivery of notifications
- - Personal identification, purchases and payments, and product and service delivery required for provision of a paid service
- - Used for marketing and promotion purposes, such as providing information on events, opportunities for participation, and advertisement information
- - Provision of existing services such as content (including advertisements), and recommending personalized content based on the user’s demographic characteristics, interests, preferences, and propensity
- - Used for service improvement, as in the case of service usage records, access frequency, statistics on service usage, and customer satisfaction.
- - Prevention and sanctions against activities that interfere with the smooth operation of the service (including theft and fraudulent use of the account)
The company does not provide personal information of a data subject to a third party without his/her consent, or except as required by law.
Personal information is provided as follows for service partnership.
The company does not provide personal information to a third party without prior consent from the data subject. However, if the data subject has consented to the provision of personal information for the purpose of using the services of chain LOTTE Hotels, partner companies, etc., personal information is provided to third parties.
See details of provision for service partnership
| Service name | Recipient | Personal information provided | Purpose of use by the recipient | Period of use by the recipient | |
|---|---|---|---|---|---|
| LOTTE Hotels Chain service | Rewards membership/Booker membership | Domestic and overseas chain hotels of LOTTE Hotels (https://www.lottehotel.com/global/en/hotel-finder.html) |
[Rewards membership] Name, date of birth, country, contact information (mobile or home phone number), e-mail, user ID, password, Rewards membership number, LOTTE Hotels (including domestic and overseas chains) reservation and service use information, points accumulation and redemption history [Booker membership] Hotel, company name, company phone number, business address, e-mail |
Approval of point redemption, Partnership service provision, Recognition service provision | Until membership withdrawal, obligatory retention period by law |
| Room registration card | Name, date of birth, nationality, mobile phone number, e-mail, stay information Optional items: Gender, country, city and province, phone number, departure date, company name, job title, preference information, request information |
Provision of LOTTE Hotels revisitation services, recognition services, personalized services, and use for product notification and marketing | Two years from date of stay | ||
| Trevi Club Membership | LOTTE HOTEL BUSAN | Name (Korean/English), e-mail, phone number (mobile or home), date of birth, address (home or work), payment method and payment details (credit card information, account information), LOTTE Hotels (including local and Busan chain hotels), service usage history (coupons and discounts), ID, password, IP/cookie information | Provision of membership services, provision of partnership services Notification and information to members, customer service such as handling inquiries and complaints, handling legal disputes, etc. |
Until membership withdrawal | |
| Family Club Membership | LOTTE HOTEL BUSAN | Name (Korean/English), gender, date of birth, mobile phone number, e-mail, address (home or work), phone number (home or work), mailing address, wedding anniversary | Identity verification and personal identification, provision of membership services, notifications and information to members, customer service such as handling inquiries and complaints, handling legal disputes, etc. | Until membership withdrawal | |
| Fitness Club Membership | LOTTE HOTEL BUSAN | Name (Korean/English), photo, date of birth, mobile phone number, address (home, work), phone number (home, work), mailing address, membership category, application receipt date, membership number, baseline date for billing the membership fee, deposit date Optional items: Gender, vehicle information, e-mail address, employer’s name, and job title |
Provision of special benefits for fitness club members, provision of personalized services, use for product notification and marketing | Until membership withdrawal | |
| Signiel Club Membership | LOTTE HOTEL BUSAN | Photo, name, date of birth, mobile phone number, home address Optional items: Gender, e-mail, work address, phone number, company name, job title, vehicle information |
Provision of membership services at local and overseas chain hotels, announcements and notifications to members, customer service such as handling inquiries and complaints, handling legal disputes, etc., provision of personalized services, use for product notification and marketing | Until membership withdrawal | |
| Lotte Duty Free Shop | Domestic LOTTE DUTY FREE locations (physical stores) (https://en.lottedfs.com/business/branch-korea/list.do) |
Name on passport, membership number, email, and available points | Approval of point redemption, Partnership service provision | Until Membership withdrawal, obligatory retention period by law | |
| Mileage service | L.POINT | Lotte Members Co., Ltd. | Name, L.POINT card number (mobile phone number) | L.POINT accumulation and usage approval | Until membership withdrawal |
| Airline mileage | Korean Air | Name, check-in/check-out date, mileage number | Earn airline mileage | Until membership withdrawal | |
| Asiana Airlines | Name, check-in/check-out date, mileage number, conversion mileage | Earn airline mileage, mileage conversion service | Until membership withdrawal | ||
| LHW Membership | THE LEADING HOTELS OF THE WORLD, Ltd | Name, address, e-mail | Provision of membership services | Until membership withdrawal | |
Transfer of personal information overseas, provision to third parties
| Name of the entity to which the personal information is transferred | The country to which the personal information is transferred | The contact information of the person responsible for the management of information | The personal information transfer date and method | Particulars of the personal information to be transferred | The purpose of using personal information by the entity to which the information is transferred | The period of retaining and using personal information by the entity to which the information is transferred |
|---|---|---|---|---|---|---|
| Singapore Airlines Limited | Singapore | dpo@singaporeair.com.sg | 1st to 10th of each month Transfer through information and communications network |
Name, Krisflyer membership number, Accumulated mileage, Date of stay | Mileage accumulation | 7 years after membership withdrawal |
The information owner may refuse the transfer of their personal information overseas through the company’s personal data protection manager or department in charge. In the event that the information owner refuses the transfer of their personal information overseas, the company shall exclude the information owner’s personal information from such overseas transfer. However, in this case, the information owner may be restricted from using any of the company’s services that require the transfer of personal information overseas.
In order to provide better service, we have some of our work carried out by third party service providers.
LOTTE Hotels consigns some of the tasks necessary to provide services to third party service providers and defines/manages/supervises matters that are necessary for them to process personal information safely, in accordance with the Personal Information Protection Act. If you do not use the services related to the tasks consigned to third party service providers, your personal information will not be provided to them.
See details of third party service providers as consignees of personal information
| Category | Third party service providers | Sub-processor | Activities to be consigned | Personal information retention and usage period |
|---|---|---|---|---|
| Membership recruitment | Domestic and overseas hotel chains
(https://www.lottehotel.com/global/ko/hotel-finder.html) |
- | Member registration service | Upon membership withdrawal or subcontractor agreement termination |
| Information system operation and management | Lotte Data Communication Co., Ltd. | - | Operation and management of cloud service and computer system | Upon membership withdrawal or subcontractor agreement termination |
| AWS | Cloud service | |||
| Ad Capsule Co., Ltd. | Website development and operation | |||
| Spectra Co., Ltd. | Chat consultation system maintenance | |||
| Treasure Data, Inc. | CDP Cloud Services | |||
| KOREA INFORMATION ＆ COMMUNICATIONS CO., LTD. (KICC) | - | Payment agency | Until the purpose is achieved | |
| Member registration management | MG Credit Information Co., Ltd. | - | Trevi Club Membership registration management | Upon membership withdrawal or subcontractor agreement termination |
| CU Leisure Co., Ltd. | - | SIGNIEL Fitness Club member registration | ||
| Product manufacture and shipping | Simmons-K Co., Ltd. | - | He:on bedding product manufacture and shipment | Upon completion of product shipment |
| Hyundai Decorations Co., Ltd. | - | He:on bedding product manufacture and shipment | ||
| Haerim | - | He:on bedding product manufacture and shipment | ||
| NURI Global Service Co., Ltd. | - | He:on bedding product shipment | 6 months | |
| Social media operation | Daehong Communications Inc. | Kaya Media Co.,Ltd. | LOTTE Hotels social media platform operation and event services agency | Upon subcontractor agreement termination |
| Cracker Lab Co., Ltd. | - | |||
| DXMC Co.,Ltd. | - | |||
| Personalized content | Insider Pte. Ltd. | - | Agency for personalized content and advertisements for websites | Upon subcontractor agreement termination |
| SPA operation management | Lesnouvels Co., Ltd. | - | Retreat SPA operation management | Upon subcontractor agreement termination |
| Room management | AMPM Co., Ltd. | - | Room maintenance and public cleaning | Upon subcontractor agreement termination |
| Doingcns Co., Ltd. | - | Room maintenance and left item delivery | 1 year(shipment request list) |
The personal data processing work handled by overseas corporations is as follows.
The company consigns data storage and operation services to overseas corporations for more convenient customer service. You may refuse to allow your personal information to be handled by overseas corporations, and if you choose to do so, your service use may be restricted.
See details of transfer of personal data overseas
| Receiving party of personal data transfer | Receiving country for data transfer | Information officer and contact information | Date/time and method of personal data transfer | Personal data to be transferred | Purpose of personal data use by the receiving party of personal data transfer | Retention and usage period of the receiving party of personal data transfer |
|---|---|---|---|---|---|---|
| Company’s overseas chain hotels (https://www.lottehotel.com/global/en/hotel-finder.html) |
See details of information officer | Data transfer via Oracle Corporation’s exclusive network during the use of Rewards/Booker membership services | Personal information collected with the consent of Rewards/Booker Membership | Approval of point redemption, Partnership service provision, Recognition service provision | Until membership withdrawal, obligatory retention period by law | |
| (Offline) Data transfer via Oracle Corporation’s exclusive network during the Rewards registration and when filing out the room stay card | Personal information collected with the consent of the customer at the time of membership registration or filling out registration card | Consignment as an agency of personal information collection | Until membership withdrawal, obligatory retention period by law | |||
| Insider Pte, Ltd. | Ireland (Amazon Web Server) |
Data Protection Officer, Insider PTE LTD Sultan Selim District, Libadiye Street no:3 34415 - 4. Levent / Istanbul Email : privacy@useinsider.com Phone : +90 053 0954 5032 |
Transmission via network at the time of service use | SpUID (which refers to a unique identification value of an encrypted user randomly generated in a browser used by the user) and behavior data, such as the user’s visit records, activity log, and search history | Provision of personalized content and advertisements | Up to 1 year from the time cookies are collected |
| Onyx CenterSource | Amsterdam NL |
Jennifer Sampson, jennifer.sampson@ onyxcentersource.com |
a. Data is transferred as a part of the commission claiming and processing activities b. Data is transferred after check out c. All data is encrypted in transit and at rest |
a. Guest first-. Middle- and last name b. Stay check in and check out |
Identify hotel resrvations and stays for accurate commision claiming and handling | Data retention is 10 years, to support local law and legislation |
| Salesforce, Inc. | USA |
https://www.salesforce.com/company/privacy/ Salesforce Data Protection Officer 415 Mission St., 3rd Floor San Francisco, CA 94105, USA Email: privacy@salesforce.com Phone: 1-844-287-7147 |
Transferred through the network the next day after membership registration and member information change | Personal information collected with the consent of the customer at the time of membership registration and stay (name, gender, age group, e-mail, contact nationality, country, language, Rewards ID, Rewards level, membership type, AppKey, web push token, consent to receive marketing ) | Personalized Marketing with Salesforce Marketing Cloud | Until membership withdrawal |
| Data Travel, LLC | USA |
Laurent Idrac, COO lidrac@hapicloud.io |
When reservations and stay status (check-in, check-out, cancellation) in the sales management system are changed, they are transferred through the network | Personal information collected with the consent of the customer at the time of membership registration and stay (name, Rewards ID, Rewards level, email, contact information, address, room reservation and stay history information) | Data processing and normalization support | Deleted after 14 days |
The information owner may refuse the transfer of their personal information overseas through the company’s personal data protection manager or department in charge. In the event that the information owner refuses the transfer of their personal information overseas, the company shall exclude the information owner’s personal information from such overseas transfer. However, in this case, the information owner may be restricted from using any of the company’s services that require the transfer of personal information overseas.
In principle, The company destroys personal information without delay upon membership withdrawal. However, in the event that separate consent is obtained for the retention period for personal information by the data subject, as in the case of Section 1 (Collection of Personal Information) above, or if we are legally obligated to keep personal information for a certain period, we shall keep it securely for said period.
Personal information for which the purpose of collection and use has been achieved, such as membership withdrawal, service termination, and the maturity of the personal information retention period agreed upon by the data subject, is destroyed in a manner that does not allow the information to be reproduced. Information that is legally obligated to be retained for a certain period is also destroyed in a manner that does not allow its reproduction, without delay after the expiration of the period.
Electronic files are securely deleted using technologies and methods to prevent restoration and reproduction, and printouts, etc., are destroyed using methods such as shredding or incinerating.
See details on the storage of personal information in accordance with relevant laws
| Category | Applicable laws and regulations | Period | Items |
|---|---|---|---|
| Records of contracts, offer withdrawals, or the like | Act on Consumer Protection in Electronic Commerce, Etc. | Five years | Identification information, contract information, or withdrawal information |
| Records of payments and supply of goods, etc. | Five years | Identification information, contract information, or withdrawal information | |
| Records of the handling of consumer complaints or disputes | Three years | Identification information, consumer dispute resolution information | |
| Books and supporting documents stipulated by the tax law | Framework Act on National Taxes | Five years | Books and supporting documents |
| Records on electronic financial transactions | Electronic Financial Transactions Act | Five years | Transaction information |
| Service visit records | Protection of Communications Secrets Act | 3 months | Service visit records (e.g., Logs and IPs) |
Data subjects (members and their legal representatives) may view or correct their personal information at any time and request withdrawal or termination of consent. In the event that a data subject makes a request to correct an error in their personal information, such information is not be used or provided until the correction is made. If incorrect personal information was provided to a third party, LOTTE Hotels shall forward the edited information to the third party to ensure the edits are made. [Download form]
- - Rewards members may view or modify their personal information or withdraw their membership on My Page on our website. If you would like to receive an e-mail and/or a call, please e-mail us at lottehotelrewards@lotte.net or call us at 02-759-7671-3, and we will verify your identity and provide you with the necessary information.
- - Should you make a request in person at a hotel or over the phone, you may view, modify, delete, or suspend processing of your personal information after verifying your identity. Please check [Contact information for each branch]on our website.
- - Please contact us at privacy@lotte.netfor inquiries regarding personal information protection, and we will guide you after verifying your identity.
- - In the event that it is difficult for a data subject to exercise his/her rights, he/she may authorize a legal representative, and the company may verify the legitimacy of the legal representative.
(A power of attorney according to Form No. 11 of the Public Notification on the Method of Processing Personal Information must be submitted.) [Download form] - - Your rights to request the suspension of the viewing or processing of your personal information may be restricted by applicable laws and regulations.
See details on how to exercise your rights to refuse to consent to the transmission of advertising information
- - To unsubscribe from e-mail notifications: Click Unsubscribe at the bottom of the e-mail
- - To unsubscribe from text notifications (SMS, LMS, MMS): Click the contact information for text notification unsubscribing at the bottom
- - To unsubscribe via our website: Edit Member Information > Consent/Decline to Request for Use for Marketing
- - To unsubscribe via the App: App Settings > Consent/Decline to Request for Marketing (Advertisement) Push Notifications
Android: Settings > Google > Advertisements > Disable Personalized Ads
iOS: Settings > Privacy > Advertisements > Restrict Ad Tracking
The company makes the following efforts to safely manage the personal information of data subjects.
- - We establish and implement internal management plans for personal information protection.
- We establish internal management plans for personal information, including matters related to the operation of personal information protection such as designation of a privacy officer, etc., and annually check whether these internal management plans are being implemented properly.
- - We take access control and access authority restriction measures for personal information.
- In order to block illegal access to personal information, we have established and implemented standards for granting, modifying, canceling, etc. access to personal information handling systems, and we have installed and operate intrusion prevention systems and intrusion detection systems. In addition, we reduce the possibility of information leaks in personal information processing systems, by separating the external Internet network and the intranet for work PCs of employees authorized to download personal information.
- - We take encryption measures to safely store and transmit personal information.
- Passwords, unique identification information, account numbers, card numbers, etc., are encrypted and stored as prescribed by laws and regulations. In addition, personal information is safely sent and received over the network through encrypted communication, etc.
- - Measures are taken to store personal information access records and prevent forgery or alteration.
- Personal information handlers maintain records of access in the personal information handling system, and the relevant access records are kept securely so that the personal information handlers and users who access the personal information processing system access records are not forged, altered, stolen, or lost.
- - We install and update security programs for personal information.
- To prevent damage to personal information, the data is backed up frequently, and the latest antivirus software is used to prevent users’ personal information or data from being leaked or damaged.
- - We take physical measures to safely store personal information
- To prevent personal information from being leaked or damaged by hacking or computer viruses, etc., systems are set up in the areas with restricted access from outside, and access control procedures are established and operated.
The company appoints privacy officers as follows to protect members’ personal information, to collect their opinions and handle complaints about such information:
- - Chief Privacy Officer (CPO): JAEKWI,KIM Vice President of information protection division, 02-771-1000, privacy@lotte.net
If you need damage relief or require a consultation regarding an infringement of personal information, you may contact the following organizations:
- - Privacy Infringement Report Center: 118 without area code, https://privacy.kisa.or.kr
- - Privacy Dispute Mediation Committee: 1833-6972 without area code, https://www.kopico.go.kr
- - Cyber Crime Investigation Unit at the Supreme Prosecutor’s Office: 1301 without area code, cid@spo.go.kr
- - National Police Agency Cyber Crime Investigation Office: 182 without area code, https://cyberbureau.police.go.kr
This Privacy Policy was established on July 1, 2008, and any addition to, deletion of, and modification to the Policy made in accordance with changes to laws, regulations, policies or security technologies, will be announced on the website of our main office.
- Initial notification date: July 1, 2008
- Publication Date: November 20, 2023
- Effective Date: November 20, 2023
The above LOTTE Hotels Privacy Policy takes effect as of November 20, 2023
Date of change of announcement date: July 1, 2008
Date of Change: November 1, 2012
Date of Change: September 19, 2014
Date of Change: July 31, 2015
Date of Change: September 15, 2015
Date of Change: January 1, 2016
Date of Change: February 6, 2016
Date of Change: March 21, 2016
Date of Change: June 1, 2016
Date of Change: July 29, 2016
Date of Change: September 22, 2016
Date of Change: March 1, 2017
Date of Change: March 15, 2017
Date of Change: May 1, 2017
Date of Change: July 4, 2017
Date of Change: August 25, 2017
Date of Change: November 3, 2017
Date of Change: November 27, 2017
Date of Change: January 24, 2018
Date of Change: March 2, 2018
Date of Change: April 3, 2018
Date of Change: May 25, 2018
Date of Change: December 27, 2018
Date of Change: May 24, 2019
Date of Change: July 29, 2019
Date of Change: Sept. 2, 2019
Date of Change: December. 12, 2019
Date of Change: February. 18, 2020
Date of Change: June. 18, 2020
Date of Change: April 29, 2021
Date of Change: October 25,2022
Date of Change: March 17, 2023
Date of Change: April 28, 2023
Date of Change: August 1, 2023
Date of Change: September 15, 2023
Date of Change: November 1, 2023
Date of Change: November 20, 2023
Notification date : November 20, 2023