Privacy Policy

1. Scope of collecting personal information

• A. Lotte Hotels may collect minimal personal information in order to provide proper service.
• B. Lotte Hotels does not collect sensitive personal information (race, ethnicity, ideology, belief, place of birth, political orientation, criminal record, state of health, sexual life, etc.) that may infringe upon the basic human rights of members.

2. Methods of collecting personal information

Lotte Hotels may collect personal information in the following ways.

• A. Web site registration, in written form (application for membership), telephone or fax, posting to the bulletin board, and sweepstakes entries
• B. Offers from affiliated companies
• C. Collecting payment information, points transactions, etc. created upon using the company

Lotte Hotels collects personal information to provide services, as follows:

1. Lotte Hotels will dispose of members' personal information without delay once the purpose for collecting or receiving such information is achieved.

• A. Information on membership entry (internal policy): Retain it for one year to provide customers with revisitation services after the cancellation of membership
• B. Room stay information (internal policy): Retain it for two years to provide customers with re-visitation services.
• C. Shipping information: When goods or services have been delivered or provided
• D. If personal information is collected for a survey, event, etc.: When such surveys, events, etc. are finished

2. Lotte Hotels retains such information for a certain period of time when it is necessary to do so for reasons of verifying the rights, obligations, etc. related to the following transactions in accordance with relevant laws and regulations including the Commercial Act:

• A. Records of contracts, offer withdrawal, or the like: Five years
• B. Records of payments and supply of goods, etc.: Five years
• C. Records of the handling of consumer complaints or disputes: Three years

3. Implementation of personal information expiration system
- Lotte Hotels retains the personal information of online members who have not used our services for one year or more, separately from other information, in accordance with Article 29(2) of the Act on Promotion of Information and Communications Network Utilization and Information Protection, Etc. and Article 16 of the Enforcement Decree of the same Act.(Effective as of August 18, 2015)

4. Disposal methods

• A. Personal information printed on paper: to be cut into pieces by a shredder or incinerated
• B. Personal information stored in electronic files: to be deleted using a technical method that makes it impossible to regenerate it

1. Under no circumstances does Lotte Hotels use or provide personal information of members to third parties or any other company/agency beyond the scope notified in the 『purpose of collecting and using personal information』,except with members' consent or under relevant laws or regulations.
When providing or sharing personal information of members through business partnerships or affiliations, Lotte Hotels notifies members in advance, in writing or by email, and individually, about those with whom such information is provided to or shared, their business purpose, the items that are to be provided or shared, and the purpose of such provision or sharing, and then seeks to obtain members' consent. Because the provision of personal information to Lotte Hotels is only for the services intended for Lotte Hotels, members' refusal to give consent may lead to the unavailability of such services that are normally provided or used.

2. We can provide personal information pursuant to relevant laws and regulations without members' consent if doing so is:

• A. required to settle charges (points), after services are offered, and to deliver goods
• B. necessary for statistical data, academic research or market survey, in which case such information is provided in an unidentifiable processed format
• C. required by laws and regulations or by law enforcement agencies for the purpose of criminal investigation in accordance with the procedures and methods set forth in applicable laws and regulations

3. Lotte Hotels provides personal information to render higher quality services to customers, as follows:

1. Lotte Hotels entrusts personal information to third party service providers to render services, as follows, and has the necessary matters stipulated in an entrustment contract for safe management thereof in accordance with relevant laws and regulations

2. Upon making an entrustment contract, Lotte Hotels sets forth clearly strict compliance with instructions related to privacy, prohibitions on personal information, responsibility for accidents, etc. and keeps the contents of such contracts in writing, for the safe protection of personal information.
Where there is a change in third party service providers with which personal information is provided or shared with, Lotte Hotels discloses the name of the changed company on the screen of this Privacy Policy within the website.

3. The Company will supervise third party service providers observing specified matters properly within the scope of activities to be entrusted to ensure that personal information subject to such entrustment is managed safely.

1. Members may read or correct their registered personal information or cancel the membership at any time.

• A. Online members may modify their personal information or cancel the membership on MY Page located in the top-right corner of the Lotte Hotels website.
• B. Such request made through personal visit to Lotte Hotels or on landlines will be promptly addressed after membership authentication
• C. Phone number: 02-759-7671~3

2. If members make a request for correcting an error in their personal information, such information will not be used or provided until such correction is finished. Also, if erroneous personal information was already provided to a third party,
we will correct the error by immediately notifying the third party of modified information.

1. Lotte Hotels runs "cookies" which stores and searches for members' information from time to time. Cookies are very small text files that are transmitted to members' browsers by the server used to operate the Lotte Hotels website and that are stored in their computer's hard disk.

2. Lotte Hotels uses cookies for the following purposes:

• A. To utilize them as an index of target marketing and service reshuffling by analyzing the access frequency, visit hours, etc. of members and non-members and grasping their preferences and interests
• B. To keep track of the information on Lotte Hotels and the tracking of services that customers have browsed with interest and to provide customized services the next time they visit such services
• C. To verify the extent of members' participation and visit times in various events hosted by Lotte Hotels, offer an differentiated opportunity for entry, and prepare material to provide distinguished information according to their individual interests
• D. Members have the option for installing cookies. Therefore, members may allow all cookies, allow or block cookies individually whenever stored, or block the storage of all cookies, by using the settings option in the web browser.

- Method for specifying whether to allow the installation of cookies [for Internet Explorer 9.0]

• 1. On the [Tools] menu, select [Internet Options].
• 2. Click the [Privacy tab].
• 3. Setting the [Privacy level].

Members blocking the installation of cookies will lead Lotte Hotels to having difficulty in rendering the services.

1. In principle, Lotte Hotels does not collect any personal information from children under age 14. If it is necessary to collect personal information from children under age 14, Lotte Hotels will comply with applicable laws and public notifications.

1. Lotte Hotels appoints personal information administrators as follows to protect members' personal information, to collect their opinions, and handle complaints, about such information:

• A. Lotte Hotels
• - Department in charge of personal information: CRM at Digital Marketing Team
• - Chief Privacy (or Personal Information) Officer : Jung-Joo Lee, Marketing Division Officer (Tel: 02-771-1000, e-mail:privacy@lotte.net)
• - Staffer in charge of personal information: Jae-Ok Han, Manager(Tel: 02-771-1000, e-mail: privacy@lotte.net)

• B. Lotte Hotel Busan
• - Department in charge of personal information: Marketing Part
• - Chief Privacy (or Personal Information) Officer : Ki-San Hong, Executive Assistant Manager
  (Tel: 051-810-5020, e-mail:kisanhong@lotte.net)
• - Staffer in charge of personal information: Ki Sung Cheong, Manager(Tel: 051-810-5520, e-mail: ckisung@lotte.net)

2. Customers can contact the following organizations to make an further inquires about personal information. Privacy Violation Reporting Center

• - Privacy Violation Reporting Center
  TEL : 118 without area codes
  URL : http://privacy.kisa.or.kr
• - Cyber Criminal Investigation Division at Supreme Prosecutors' Office
  TEL : 1301 without area codes
  URL : www.spo.go.kr
• - National Police Agency Cyber Bureau
  TEL : 182 without area code
  URL : cyberbureau.police.go.kr

1. Lotte Hotels implements the following technical countermeasures to keep members' personal information secure in handling their information, lest such information should be lost, stolen, leaked, altered, or compromised.

• A. A user's personal information is protected with passwords, and important data is protected through a separate security measure in a manner that encodes files and transmitted data or uses a file locking function.
• B. Lotte Hotels adopts the Secure Socket Layer that makes it possible to send personal information on our network safely by using an encryption algorithm.
• C. To prevent a user's personal information from being leaked by hacking, etc., Lotte Hotels uses a double fire wall to block unauthorized external access, and monitors possible breaches around the clock by installing a 24 hour breach detection system in each server.

2. Lotte Hotels minimizes the number of staff handling personal information, emphasizes the importance of compliance with this Policy through frequent education and training given to employees in charge, and takes immediate action against any related problem.

• A. Lotte Hotels takes no responsibility for matters arising from members' mistakes or the basic risk intrinsic to the Internet. Each member must manage his/her personal information appropriately and be responsible for such management.
• B. If personal information is lost, leaked, altered or compromised due to another internal administrator's mistake or an technical accident or incident, Lotte Hotels will immediately notify users of the fact, take proper measures against such accidents or incidents, and work out appropriate compensation.

1. Lotte Hotels does not transmit commercial information for profit-making purposes against the clear intentions of customers who have opted out.

2. For the transmission of commercial material including product guides for online marketing, Lotte Hotels takes measures to help customers discern the following matters in both the subject and the body of an email:

• - the subject line of the email: A phrase titled (advertisement) and the sender's name are indicated in the email subject.
• - the body of the email: The sender's name, email address, telephone and address are indicated there so that users can express their intentions to opt-out. Lotte Hotels specifies individual methods by which users can easily express their intentions to opt-out.

3. In case of sending commercial information for profit-making purposes to customers by non-email methods such as fax or text message, Lotte Hotels takes necessary measures such as indication of a sender's name, as well.