HOTEL LOTTE Co., Ltd. Privacy Policy - Privacy Policy

1. Collecting personal information

The Company collects the minimum amount of personal information required for service provision.

In order to provide the following services, we collect the minimum amount of personal information through our website or using a paper form when customers sign up for membership or use a service.

Data subjects without a membership may use certain features, such as hotel search and viewing articles, as members do. When a data subject signs up for membership to use a personalized or membership service, such as membership-rate reservation, LOTTE HOTELS shall collect the minimum amount of personal information required for service use.

The methods we use to collect personal information are as follows.

When collecting personal information, we obtain the user's prior informed consent using the following methods:

- Collecting information directly from the user, who consents to the collection of personal information when signing up for membership or using a service
- Receiving personal information from partner services, organizations, etc.
- Collecting information through websites, application pages, e-mail, fax, phone, etc. in the course of providing customer service
- Collecting information from those who participate in online and offline events, etc.
- Collecting information on payments and points transactions generated during service use, etc.

The personal information collected from a data subject during service use is as follows.

Additional personal information may be collected only from data subjects who use specific services, such as individual services within LOTTE HOTELS, or who participate in promotional events. When collecting personal information, we inform data subjects, at the time of collection, of the “items of personal information to be collected”, the “purpose of collection and use of personal information”, the “retention period of personal information”, and the “right to refuse to provide personal information and disadvantages associated with the refusal” and obtain consent.

Personal information collected from online services

Personal information collected from online services : Category, Collection method, Items to be collected, Purpose, Retention period
Category	Collection method	Items to be collected		Purpose	Retention period
Rewards membership	Website (web/app)	Required	- Name (in English), country, date of birth, contact number (mobile or home), e-mail, ID, password, - Rewards number, LOTTE HOTELS (including domestic and overseas locations) reservation and stay information, accumulated points and usage records, IP/cookies information	- Room or golf course reservation and the provision of services on subsequent visits - Verification and personal identification to provide membership services - Accumulation and usage of points for services provided by the Company and provision of various other membership services such as discounts - Membership management and announcements - Securing effective channels of communication for handling complaints	Upon membership withdrawal
		Optional	- Name (in Korean), name (in English), country, date of birth, contact number (mobile or home), e-mail, ID, password - Rewards number, LOTTE HOTELS (including domestic and overseas locations) reservation and stay information, accumulated points and usage records, IP/cookies information	- Provision of personalized membership services - Information related to domestic and overseas LOTTE HOTELS membership services through text message or e-mail - Provision of information on the Company’s discounts and new products, marketing usage, promotion information and participation, and advertisement information
		Optional	- Company name, company e-mail	- Provide employee services
L.POINT integrated members		Required	- Name (English and Korean), country, date of birth, mobile phone number, e-mail, ID, CI - Rewards number, LOTTE HOTELS (including domestic and overseas locations) reservation and stay information, accumulated points and usage records, IP/cookies information	- Room or golf course reservation and the provision of services on subsequent visits - Verification and personal identification to provide membership services - Accumulation and usage of points for services provided by the Company and provision of various other membership services such as discounts - Membership management and announcements - Securing effective channels of communication for handling complaints	Upon membership withdrawal
L.POINT integrated members		Optional	- Name (English and Korean), country, date of birth, mobile phone number, e-mail, ID - Rewards number, LOTTE HOTELS (including domestic and overseas locations) reservation and stay information, accumulated points and usage records, IP/cookies information	- Information related to domestic and overseas LOTTE HOTELS membership services through text message or e-mail - Provision of information on the Company’s discounts and new products, marketing usage, promotion information and participation, and advertisement information	Upon membership withdrawal
Booker membership		Required	[LOTTE HOTEL REWARDS information] - Name (in English), country, date of birth, contact number (mobile or home), e-mail, ID, password - Rewards membership number, LOTTE HOTELS (including domestic and overseas chains, hereinafter “LOTTE HOTELS”) reservation and stay information (including periods of stay, accommodation rates, and purchase amounts), accumulated points and usage records, discount history, IP/cookies information, mobile phone/e-mail account verification [Company Information] - Hotel, company name, company phone number, company address, e-mail - LOTTE HOTELS (including domestic and overseas branches, hereinafter referred to as “LOTTE HOTELS”) reservation and stay information, accumulated points and usage records, discount history, IP/cookies information	- Identity and personal verification - Provision of membership services such as accumulation and use of points and discounts - Member announcements - Securing effective channels of communication for handling complaints, preventing abuse	Until membership withdrawal
Booker membership		Optional	- Name (in Korean), required items to be collected	- Provision of information about membership and personalized services, hotel discounts and new products, and marketing communications	Until membership withdrawal
Room reservations		Required	[Rewards members] - Name (in English), contact number (mobile, home, or work), e-mail, credit card information - Credit card information (credit card type, credit card number, expiration date)	- Provision of room reservation services - Sending announcements and information related to reservations - Provision of express check-in services - Processing customer complaints and other civil complaints, preventing abuse - Using card information for room reservations	Two years (If the reservation is canceled, five days from the date of cancellation)
		Optional	[Rewards members] - Credit card information (credit card type, credit card number, expiration date)	- Quick hotel room reservation service	One year (if credit card information is removed or membership is withdrawn)
		Required	[Non-member Reservations] - English name, e-mail, phone number (mobile, home or work) - Credit card information (credit card type, credit card number, expiration date)	- Provision of room reservation services - Sending announcements and information related to reservations - Provision of express check-in services	Two years (If the reservation is canceled, five days from the date of cancellation)
Mobile check-in		Required	[Rewards members] - Name (in English), e-mail, contact information, date of birth, nationality - Rewards number, stay and reservation records (including reservation numbers, periods of stay, room numbers, accommodation rates, and purchase amounts), vehicle number - Payment information (credit card information, expiration date)	- Identity and personal verification - Provision of services including hotel reservations, stay, customer relations, delivery of announcements - Processing customer complaints and other civil complaints	Two years
Mobile check-in		Required	[Non-member reservation] - Name (in English), e-mail, contact information, date of birth, nationality - Stay and reservation records (including reservation numbers, periods of stay, room numbers, accommodation rates, and purchase amounts), vehicle number - Payment information (credit card information, expiration date)		Two years
Restaurant reservation (LOTTE HOTEL MOSCOW, LOTTE HOTEL ST.PETERSBURG, LOTTE HOTEL YANGON)		Required	- Name (in English), mobile phone number, e-mail	- Notification of reservation and provision of services	Five days
		Optional	- Contact information	- Notification of reservation and provision of services	Five days
Restaurant reservations (LOTTE HOTEL SEOUL, LOTTE HOTEL WORLD, LOTTE HOTEL ULSAN, LOTTE HOTEL JEJU, SIGNIEL SEOUL, SIGNIEL BUSAN)		Required	- Name (Korean or English), contact information (mobile phone number) - Payment history (payment, discount amount, payment date and time), IP/cookies information, LOTTE HOTELS restaurant reservation and service usage information	- Personal and identity verification, customer notifications - To ensure smooth communication procedures when processing complaints	Two years
		Optional	- E-mail, other requests	- Provision of personalized services
		Optional	- Required items to be collected, e-mail	- Notification of restaurant promotions and new menu items and use for marketing purposes
Online sign-up for Trevi Club membership		Required	- Name (in Korean/English), e-mail, phone number (mobile or home), date of birth, gender, address (home or work) - Payment method and payment history (credit card information, account information) - LOTTE HOTELS (including local and Busan branches, hereinafter referred to as “LOTTE HOTELS”) service usage history (coupons and discounts), ID, password, IP/cookies information	- Provision of membership services, provision of partner services - Sending announcements and information to members - Processing inquiries and complaints and other civil complaints	Until membership withdrawal
		Optional	- Required items to be collected	- Provision of information relating to LOTTE HOTELS, discounts, and new products - To use for marketing purposes
		Optional	- Employer’s name, job title	- Identity verification and recognition services for each member - Provision of personalized services
Membership verification online		Required	- E-mail - Service usage records (coupons and discounts), ID, password, IP/cookies information	- Identity and personal verification - Provision of membership services, sending announcements and information to members - Annual fee payment - Processing inquiries and complaints and other civil complaints	Until membership withdrawal
Online wedding consultation		Required	- Name, e-mail, contact information (mobile or home phone number) - Wedding ceremony information, requests	- Provision of reservation and customer assistance services	Two years (However, e-mail and contact information will be retained for one month)
Inquiries about conference services (conferences)		Required	- Name, e-mail, contact information, country - Event information (event name, selected hotel, number of people participating in the event)	- Provision of reservation and customer assistance services
Inquiries about conference services (meetings)		Required	- Name, e-mail, contact information - Event information (event name, selected hotel, number of people participating in the event)	- Provision of reservation and customer assistance services
Service Academy Q&A		Required	- Name, e-mail, phone number - Requests (subject, details)	- Response to customer inquiries and provision of services	One year (However, e-mail and contact information will be retained for one month)
Customer voice		Required	- Assistance details (branch name, assistance type, details) - Customer information (name, e-mail, contact information)	- Response to customer inquiries and provision of services - Processing customer complaints	Three years
Ethical Management Hotline		Required	- Reporter information (name, contact information, e-mail) - Report details (subject, details)	- Receipt notification and provision of services	Three years
Ethical Management Hotline		Optional	- Report information (chain name, subject of report, department, position)	- Receipt details confirmation	Three years
Sign-in linking service (Apple)	Website (web/app)	Required	- E-mail	- Quick sign-in services through social media - Provision of sign-up services	Until disconnected
Sign-in linking service (Google)		Required	- E-mail
Sign-in linking service (Naver)		Required	- E-mail, date of birth, name, year of birth, mobile phone number
Sign-in linking service (Kakao)		Required	- E-mail, date of birth, name, year of birth, mobile phone number
Sign-in linking service (L.POINT)		Required	- Name, e-mail, contact number (mobile)
Events	Website (web/app), 이메일	Required	- Name, e-mail, contact information	- Event winner announcement, delivery of notifications - Ensure a smooth communication channel for handling inquiries, complaints, etc.	Period of consent
Events	Website (web/app), 이메일	Required	- Name, address, (when processing public charges and utilities) resident registration number	- Sending prizes to event winners - Public charges and utilities report (KRW 50,000 or more)	When the report is completed
e-SHOP purchasing service	Website (web/app)	Required	- Name (Korean or English), contact information (mobile phone number) - Rewards number, Rewards points	- Identity verification for LOTTE HOTELS e-SHOP services - Securing effective communication channels for sending LOTTE HOTELS e-SHOP announcements and processing complaints	Two years
e-SHOP purchasing service	Website (web/app)	Required	- Shipping information (person who made the order, recipient’s name, address, mobile phone number) - Payment record (credit card company, credit card number, payment and discount amount, payment date and time) - Accumulated points and usage (LOTTE Member card number or mobile phone number, Rewards points number)	- Product purchase and usage information - Respond to 1:1 inquiries	Two years
Mileage conversion	Website (web/app)	Required	[Korean Air] - Name (in English), date of birth, airline mileage number, miles for conversion	- Member mileage conversion Services	One year
Mileage conversion	Website (web/app)	Required	[Asiana Airlines] - Name (in English), airline mileage number, miles for conversion	- Member mileage conversion Services	One year
Points conversion	Website (web/app)	Required	[Naver Pay] - Korean name, points for conversion	- Points conversion service	Six months from the date of consent
Points conversion	Website (web/app)	Required	[CJ ONE] - CJ ONE membership card number, Korean name, converted points	- Points conversion service	Six months from the date of consent
SRC (Senior Residence & Care by LOTTE HOTELS & RESORTS, hereinafter referred to as “SRC”) service	Website (web)	Optional	- Residential area, interests, area of interest	- Provision of personalized membership services	Upon membership withdrawal
SRC service (Sending newsletters)		Required	- E-mail	- Information on products related to services and SRC complex through newsletters (e-mail) - Provide information on events and participation, marketing use, and marketing information	Until the newsletter service (e-mail) is terminated or when the customer cancels their subscription
SRC service (1:1 Inquiry)		Required	- English name, e-mail - Inquiry details (if personal information is included)	- Response to customer inquiries and provision of services	Until two years from the date of consent

※ During service use, IP addresses, cookies, records on service use, and visit history, etc., may be automatically generated and collected.

※ When you sign up for L.POINT integrated membership, your English name will be automatically converted based on your Korean name. You may edit your name to the English name on your passport only one time, at [My Page > Edit Member Information].

Collection and use of behavioral data

Collection and use of behavioral data : Behavioral data items to be collected, Behavioral data collection methods, Purpose of personal information collection, Retention and use period for behavioral data, How to exercise user control, 이용자 피해구제 방법
Behavioral data items to be collected	User’s visit history, activity log, and search history on the service domain
Behavioral data collection methods	Automatically collected and sent when the user uses the service
Purpose of personal information collection	Provision of personalized advertisements and content based on the user’s interests and estimation of demographic characteristics
Retention and use period for behavioral data	Will be stored for one year and then destroyed
How to exercise user control	Web browser: Select whether to allow cookies or not App: Android Google Settings > Advertisements > Disable Interest-based Advertisements 　 : iOS Settings > Privacy > Advertisements > Restrict Ad Tracking
How to remedy damage to user	Department in charge: Platform Manager Contact information: +82-2-771-1000

Information and functionality access privileges in mobile devices

The Company accesses information and functionalities on the user's mobile device for mobile app services.
We notify and obtain the user's consent regarding required/optional access privileges when the app is first executed. Consent regarding optional access privileges may be obtained separately upon using a service that utilizes such access privileges.
For optional access privileges, the method of obtaining consent may vary depending on the iOS or Android OS version. App service usage is not restricted even if users do not agree to access privileges.

Information and functionality access privileges in mobile devices : Android/iOS, Access privileges, Purpose
Category		Access privileges	Purpose
Android	Required	Mobile device and app version	To collect device and app information for usability
	Optional	Notifications	To receive information on new packages and promotions
		Gallery	To attach file when saving Rewards online card and using Customer Voice
		Camera	When taking a photo for customer comments/inquiries
		Bluetooth	To use the mobile key service
		Contact information	To access and edit contacts when sharing a mobile key
iOS	Required	Mobile device and app version	To collect device and app information for usability
	Optional	Notifications	To receive information on new packages and promotions
		Gallery	To attach files when saving Rewards online card and using Customer Voice
		Camera	When taking a photo for customer comments/inquiries
		Bluetooth	To use the mobile key service
		Contact information	To access and edit contacts when sharing a mobile key

Personal information collected offline

Personal information collected offline : Category, Collection method, Items to be collected, Purpose, Retention period
Category	Collection method	Items to be collected		Purpose	Retention period
Rewards membership	In writing	Required	- Name (English), date of birth, country, mobile phone number, e-mail, membership number, LOTTE HOTELS (including local and overseas locations) reservation and stay information, accumulated points and usage records	- Room or golf course reservation and the provision of services on subsequent visits - Verification and personal identification to provide membership services - Accumulation and usage of points for services provided by the Company and provision of various other membership services such as discounts - Membership management and announcements - Securing effective channels of communication for handling complaints	Upon membership withdrawal
		Optional	- Name (in Korean), name (in English) date of birth, country, mobile phone number, e-mail, membership number, LOTTE HOTELS (including local and overseas locations) reservation and stay information, accumulated points and usage records	- Provision of personalized membership services
		Optional		- Information related to domestic and overseas LOTTE HOTELS membership services through text message or e-mail - Provision of information on the Company’s discounts and new products, marketing usage, promotion information and participation, and advertisement information
Room registration card	In writing	Required	- Name, date of birth, nationality, mobile phone number, e-mail, stay information	- Identity verification procedures, customer notifications - Processing complaints	Two years from date of stay
		Optional	- Gender, country, city and province, phone number, departure date (check-out date), company name, job title, preference information, request information	- Personal identification and provision of recognition and personalized services
		Optional	- E-mail, mobile phone number	- Provision of information on discounted products, new products and marketing
SIGNIEL Club membership	In writing	Required	- Photo, name, date of birth, mobile phone number, home address	- Identity verification procedures, customer notifications - Processing complaints	Until membership withdrawal
		Optional	- Gender, e-mail, work address, phone number, company name, job title, vehicle information	- Personal identification, provision of personalized services
		Optional	- Address, phone number, mobile phone number, e-mail	- Provision of information on discounted products, new products and marketing
Trevi Club membership	In writing, via phone, fax, e-mail, partner company	Required	- Name (Korean/English), gender, date of birth, mobile phone number, address (home and work), mailing address, card type category, payment information (credit card information and account information), membership service usage history	- Identity and personal verification, provision of membership services, delivery of information and notifications to members, annual fee payment - Processing inquiries and complaints and other civil complaints	Until membership withdrawal (however, card information will be discarded once the purpose is fulfilled)
		Optional	- Required items to be collected, e-mail, information on the recommender, employer's name, and job title	- Provide personalized membership services
		Optional	- Required and optional items to be collected	- Provide information about membership, hotel discounts and new products, and marketing communications
Fitness Club membership	In writing, partner company	Required	- Name (Korean/English), photo, date of birth, mobile phone number, address (home, work), phone number (home, work), mailing address	- Identity and personal verification, provision of membership services, delivery of notifications to members (can be used for emergency contact in the event of an urgent need), annual fee payment - Processing inquiries and complaints and other civil complaints	Until membership withdrawal
		Required	- Resident registration number (Article 82 of the Inheritance Tax and Gift Tax Act and Article 84 of its Enforcement Decree)	- Transfer and report at the time of transfer	When the report is completed
		Optional	- Gender, e-mail, company name, job title, vehicle information	- Personal identification, provision of personalized services	Until membership withdrawal
		Optional	- Address, phone number, mobile phone number, e-mail	- Notifications of hotel discount products and new products, marketing purposes	Until membership withdrawal
Family Club membership	In writing	Required	- Name (Korean/English), gender, date of birth, mobile phone number, e-mail, address (home or work), phone number (home or work), mailing address, wedding anniversary	- Identity and personal verification, provision of membership services, delivery of information and notifications to members - Processing inquiries and complaints and other civil complaints	Until membership withdrawal
		Optional	- Required items to be collected	- Provide personalized membership services
		Optional	- Required items to be collected	- Provide information about membership, hotel discounts and new products, and marketing communications
Events	In writing	Required	- Name, e-mail, contact information - Products for delivery: Address	- Event winner announcement, delivery of notifications - Ensure a smooth communication channel for handling inquiries, complaints, etc.	Period of consent
Events	In writing	Required	- Name, resident registration number(Income Tax Act Article 162-3), address	- Public charges and utilities report (KRW 50,000 or more)	When the report is completed
Currency exchange (foreign currency exchange)	Offline	Required	- Name, passport number, nationality	- Reporting currency exchange and foreign exchange	Five years
L.POINT	Offline	Required	- Name, L.POINT card number (mobile phone number)	- L.POINT accumulation and payment services	Five years
Airline mileage	Offline	Required	- Name, date of stay, mileage number	- Airline mileage accumulation service	One year
Cash receipt	Offline	Required	- Mobile phone number, cash receipt card number	- Cash receipt issuance	Five years

2. Use of personal information

3. Provision and consignment of personal information

The Company does not provide personal information of a data subject to a third party without their consent except as required by law.

Personal information is provided as follows for service partnership.

The Company does not provide personal information to a third party without prior consent from the data subject. However, if the data subject has consented to the provision of personal information for the purpose of using the services of chain LOTTE HOTELS, partner companies, etc., personal information is provided to third parties.

Provision for Partnerships when Using Services

Provision for Partnerships when Using Services : Service name, Recipient, Personal information provided, Purpose of use by the recipient, Period of use by the recipient
Service name		Recipient	Personal information provided	Purpose of use by the recipient	Period of use by the recipient
LOTTE HOTELS branch service	Rewards membership / Booker membership	Domestic and overseas branches of LOTTE HOTELS (https://www.lottehotel.com/global/ko/brands/hotel-search)	[Rewards membership] - Name, date of birth, contact information (mobile or home phone number), country, e-mail, user ID, password, Rewards membership number, LOTTE HOTELS (including domestic and overseas locations) reservation and usage information, accumulated points and usage records [L.POINT integrated members] - Name (in English and Korean), country, date of birth, contact information (mobile phone number), e-mail, user ID, Rewards membership number, LOTTE HOTELS (including domestic and overseas chains) reservation and usage information, points accumulation and usage records, and IP/cookies information [Booker Membership] - Company information: Hotel, company name, company phone number, company address, e-mail	- Provision of recognition services, used for approval of points use, provision of partner services	Upon membership withdrawal
	Room registration card		- (Required) Name, date of birth, country, mobile phone number, e-mail, stay information - (Optional) Gender, country, city and province, phone number, departure date (check-out date), company name, job title, preference information, request information	- Provision of LOTTE HOTELS revisit services, recognition services, personalized services, and use for product notifications and marketing	Two years from date of stay
	Trevi Club membership	LOTTE HOTEL BUSAN	- Name (Korean/English), e-mail, phone number (mobile or home), date of birth, address (home or work), payment method and payment details (credit card information, account information), LOTTE HOTELS (including local and Busan locations, hereinafter “LOTTE HOTELS”), service usage history (coupons and discounts), ID, password, IP/cookies information	- Provision of member services and partner services, delivery of announcements and information to members - Processing inquiries and complaints and other civil complaints	Upon membership withdrawal
	Family Club membership	LOTTE HOTEL BUSAN	- Name (Korean/English), gender, date of birth, mobile phone number, e-mail, address (home or work), phone number (home or work), mailing address, wedding anniversary	- Identity and personal verification, provision of membership services, delivery of information and notifications to members - Processing inquiries and complaints and other civil complaints	Upon membership withdrawal
	Fitness Club membership	LOTTE HOTEL BUSAN	- (Required) Name (Korean/English), photo, date of birth, mobile phone number, address (home, work), phone number (home, work), mailing address, membership category, application receipt date, membership number, baseline date for billing the membership fee, deposit date - (Optional) Gender, vehicle information, e-mail address, employer’s name, and job title	- Provision of special benefits for fitness club members, provision of personalized services, use for product notifications and marketing	Upon membership withdrawal
	SIGNIEL Club Membership	LOTTE HOTEL BUSAN	- (Required) Photo, name, date of birth, mobile phone number, home address - (Optional) Gender, e-mail, work address, phone number, company name, job title, vehicle information	- Provision of membership services at domestic and overseas hotel branches, sending announcements and information to members - Processing inquiries and complaints and other civil complaints - Provision of personalized services, product notifications, and marketing purposes	Upon membership withdrawal
	Membership verification online	LOTTE HOTEL BUSAN	- Name (Korean/English), e-mail, phone number (mobile or home), date of birth, address (home or work), service usage history (coupons and discounts), ID, IP/cookies information	- Provision of member services and partner services, delivery of announcements and information to members - Processing inquiries and complaints and other civil complaints	Upon membership withdrawal
Mileage service	L.POINT	LOTTE Members Co., Ltd.	- Name, L.POINT card number (mobile phone number)	- L.POINT accrual and usage approval	Upon membership withdrawal
	Airline mileage	Korean Air	- Name (in English), date of birth, airline mileage number, miles for conversion	- Mileage conversion service	Upon membership withdrawal
	Airline mileage	Asiana Airlines	- Name (in English), check-in/check-out dates, airline mileage number, converted mileage	- Airline mileage accrual, mileage conversion services	Upon membership withdrawal
	LHW membership	THE LEADING HOTELS OF THE WORLD, Ltd	- Name, address, e-mail	- Provision of membership services	Upon membership withdrawal
	LOTTE Duty Free Shop mileage	Domestic offline LOTTE Duty Free Shop (https://kr.lottedfs.com/business/branch-korea/list.do)	- Name in passport, e-mail, membership number, available points	- Approval of the use of points, provision of partner services	Upon membership withdrawal
Points conversion service		Naver Financial Corporation	- Customer identification information, converted points	- Naver Pay points conversion service	Service usage period
Points conversion service		CJ Olive Networks, Inc.	- LOTTE HOTEL REWARDS number, CJ ONE membership card number, name (in Korean), LH Points balance and available points to convert	- Verification of membership and provision of points conversion services	Five years from viewing/converting points

Provision to third parties when transferring personal information overseas

Provision to third parties when transferring personal information overseas : Recipient of personal information, Receiving country for data transfer, Information officer and contact information, Date/time and method of personal information transfer, Personal information to be transferred, Purpose of using transferred personal information by recipient, Retention and usage period of the receiving party of personal information transfer
Recipient of personal information	Receiving country for data transfer	Information officer and contact information	Date/time and method of personal information transfer	Personal information to be transferred	Purpose of using transferred personal information by recipient	Retention and usage period of the receiving party of personal information transfer
Singapore Airlines Limited	Singapore	dpo@singaporeair.com.sg	- 1st - 10th of every month Transferred to Singapore Airlines internal network	- Name, KrisFlyer membership number, accumulated mileage, accommodation dates	- Mileage accrual	Seven years after membership withdrawal

The data subject may refuse the transfer of their personal information overseas through the Company’s personal information protection manager or department in charge. In the event that the data subject refuses the transfer of their personal information overseas, the Company shall exclude the data subject’s personal information from such overseas transfer. However, in this case, the data subject may be restricted from using any of the Company’s services that require the transfer of personal information overseas.

In order to provide better service, we have some of our work carried out by third party service providers.

LOTTE HOTELS consigns some of the tasks necessary to provide services to third party service providers and defines/manages/supervises matters that are necessary for them to process personal information safely, in accordance with the Personal Information Protection Act. If not using the services related to the work outsourced to contractors, the customer’s personal information is not provided to the contractor.

Personal information consignment company

Personal information consignment company: Category, Third-party service providers, Re-trustee, Activities to be consigned, Personal information retention and usage period

Category

Third-party service providers

Re-trustee

Activities to be consigned

Personal information retention and usage period

Membership recruitment

Domestic and overseas branches
(https://www.lottehotel.com/global/ko/brands/hotel-search)

-

Member recruitment service

Upon membership withdrawal or subcontractor contract termination

Information system operation and management

LOTTE Innovate Co., Ltd.

-

Operation and management of cloud service and computer system

Upon membership withdrawal or subcontractor contract termination

AWS

Cloud service

ADCAPSULE Co., Ltd.

Website development and operation

eTRIBE Co., Ltd.

Treasure Data

CDP Cloud Service

North Star Consulting

CDP system development and operation

GDSK Co., Ltd.

Tablo development and operation

MEGAZONE CLOUD Corp.

SFMC operation

Korea Information & Communication Co., Ltd.
(KICC)

-

Payment agency

Until the purpose is achieved

KIS Information & Communication, Inc.

-

NICE Information and Communication

-

WITPLUS

-

e-SHOP development and operation

Upon subcontractor contract termination

LOTTE Members Co., Ltd.

LOTTE Innovate Co., Ltd.

Integrated Membership System (L.POINT) Operational Tasks

Upon subcontractor contract termination

Transcosmos Korea Inc.

Naver Corporation

KG INICIS Co., Ltd.

NICE Information Service Co., Ltd.

Korea Mobile Certification Inc.

Shinhan Bank

Smart Solutions Co., Ltd.

DOWHAT Co., Ltd.

-

　 Order trading system (OTS)
Development and operation

Upon subcontractor contract termination

Sending e-mails Services

humusOn Inc.

-

Sending e-mails

Upon subcontractor contract termination

Member registration management

MG Credit Information Co., Ltd.

-

Trevi Club Membership registration management

Upon membership withdrawal or subcontractor contract termination

Product manufacture and shipping

NURI Global Service Co., Ltd.

Simmons-K Co., Ltd.

He:on bedding product manufacture and shipment

Upon subcontractor contract termination

Hyundai Decorations Co., Ltd.

He:on bedding product manufacture and shipment

Haerim Corporation

He:on bedding product manufacture and shipment

Linear Block

Frette product shipping

Social media operation

Kaya Media Corporation

-

Social media platform operation and event services agency

Upon subcontractor contract termination

Cracker Lab Co., Ltd.

-

Spoons Co., Ltd.

-

Event creation and execution

Dodamind Co., Ltd.

-

Using event creation tools to customers

Upon subcontractor contract termination

SPA operation and management

Les Nouvels Co., Ltd.

-

retreat SPA operation and management

Upon subcontractor contract termination

Housekeeping

AMPM Co., Ltd.

-

Cleaning rooms and public areas

Upon subcontractor contract termination

Doing CNS Co., Ltd.

-

Cleaning rooms and shipping acquired items

Upon subcontractor contract termination

Concierge services

LOTTE Rental

-

Confirming customer arrival and departure, operating vehicles

Upon subcontractor contract termination

Special holiday sales

Special holiday sales : 수탁자, 재수탁자
수탁자	재수탁자
Dooyoung F&D Co., Ltd.	Logen Co., Ltd.
Kunhwa	LOTTE Logistics
Haru Hana	-
Charm Jayeon Agricultural Cooperative Corporation	ePost
Chorokbada Fisheries Cooperative Corporation	힘쎈영광물류
Daegyeong Ham	-
Namwon Hanaro Livestock Distribution Co., Ltd.	LOTTE Logistics
Tavalon Korea	Logen Co., Ltd.
Yetgan	ePost
LOTTE International Co., Ltd.	LOTTE Logistics
Shinangchon Food	ePost
Olleh Seafood	한진택배
Neulpureun Marine Products	-
S. Food	LOTTE Logistics
Ilpumchae	LOTTE Logistics
JS Town Co., Ltd.	송정동영업소
Korea Traditional Foods Agricultural Corporation Co., Ltd.	-
Kyodong Korean Traditional Cookies	-
Seonhae Marine Products	-
Lasan Premium	-
eYoung International	-
Dongmyoung F&B	Logen Co., Ltd.
Choice M Korea	LOTTE Logistics
Daon F&C	LOTTE Logistics
Enoteca Korea	Logen Co., Ltd.
Aapkipa Sand	-
Hankyul	-
청도명감	CJ Logistics Corporation

Special holiday sales and shipping

Upon subcontractor contract termination

The personal information processing work handled by overseas corporations is as follows.

LOTTE HOTELS consigns data storage and operation services to overseas corporations for more convenient customer service. You may refuse to allow your personal information to be handled by overseas corporations, and if you choose to do so, your service use may be restricted.

Overseas transfer of personal information

The Company consigns data storage and operation services to overseas corporations for more convenient customer service.

Overseas transfer of personal information : Recipient of personal information, Receiving country for data transfer, Information officer and contact information, Date/time and method of personal information transfer, Personal information to be transferred, Purpose of using transferred personal information by recipient, Retention and usage period of the receiving party of personal information transfer
Recipient of personal information	Receiving country for data transfer	Information officer and contact information	Date/time and method of personal information transfer	Personal information to be transferred	Purpose of using transferred personal information by recipient	Retention and usage period of the receiving party of personal information transfer
Overseas branches of the Company (https://www.lottehotel.com/global/ko/brands/hotel-search)		See details of information officer Target: Lotte Hotel branches and contact information (https://www.lottehotel.com/global/en/brands/hotel-search) A. Lotte Hotel - Personal information protection officer: Information protection division manager Kim Jae-gwi (Tel: +82-02-771-1000) - Personal information protection practice department: Personal information protection team B. Lotte Hotel domestic corporations and overseas chains - Lotte Hotel Busan: General Manager (Korea, Tel: +82-51-810-1000) - Lotte Hotel Moscow: General Manager (Russia, Tel: +7-495-745-1000) - Lotte Hotel St. Petersburg: General Manager (Russia, Tel: +7-812-336-10-00) - Lotte Hotel Samara: General Manager (Russia, Tel: +7-846-920-10-00) - Lotte Hotel Vladivostok: General Manager (Russia, Tel: +7 (423) 240-22-33) - Lotte Hotel New York Palace: General Manager (USA, Tel: +1 (800) 804-7035) - Lotte Hotel Seattle: General Manager (USA, Tel: +1-206-800-8110) - Lotte Hotel Guam: General Manager (USA, Tel: +1-671-646-6811) - Lotte Hotel Hanoi: General Manager (Vietnam, Tel: +84-28-3823-3333) - Lotte Hotel Saigon: General Manager (Vietnam, Tel: +84-24-3333-1000) - Lotte Hotel Yangon: General Manager (Myanmar, Tel: +95-1-935-1000) - Lotte City Hotel Tashkent Palace: General Manager (Uzbekistan, +998-78-120-58-0) - Lotte Arai Resort: General Manager (Japan, Tel: +81-255-75-1100)	- Data transfer via Oracle Corporation’s exclusive network when using Rewards/Booker membership services	- Personal information collected after obtaining consent, such as Rewards/Booker membership	- Approval of points use, provision of partner services and recognition services	Upon membership withdrawal
			-(Offline) Data transfer via Oracle Corporation’s exclusive network when signing up for Rewards membership and filling out a room stay card	- Personal information collected by receiving consent when signing up for Rewards membership or filling out a room stay card	- Consignment of personal information collection	Upon membership withdrawal
Onyx Center Source	The Netherlands (Amsterdam NL)	Jennifer Sampson, jennifer.sampson@ onyxcentersource.com	- Transmission via dedicated network after check-out	- Name, check-in/check-out date	- Charging and processing reservation fees	Retained for 10 years in accordance with local regulations
Salesforce	United States	https://www.salesforce.com/company/privacy/ Salesforce Data Protection Officer 415 Mission St., 3rd Floor San Francisco, CA 94105, USA Email: privacy@salesforce.com Phone: +1-844-287-7147	- Data transfer via the network for membership sign-up and changing member information on the following day	- Personal information collected by receiving customer consent during sign-up or during their stay (gender, age range, e-mail, contact information, nationality, country, language, Rewards ID, web push token, consent to receiving marketing information)	- Personalized marketing through Salesforce marketing cloud - Sending announcements	Upon membership withdrawal까지
Data Travel, LLC	United States	Laurent Idrac, COO lidrac@hapicloud.io	- When reservations and stay status (check-in, check-out, cancellation) are changed in the sales management system, the information is transferred through the network	- Personal information collected by receiving customer consent during sign-up or during their stay (name, Rewards ID, Rewards tier, e-mail, contact information, address, room reservation and stay information)	- Processing data and supporting normalization	Deleted after 14 days

The data subject may refuse the transfer of their personal information overseas through the Company’s personal information protection manager or department in charge. In the event that the data subject refuses the transfer of their personal information overseas, the Company shall exclude the data subject’s personal information from such overseas transfer. However, in this case, the data subject may be restricted from using any of the Company’s services that require the transfer of personal information overseas.

4. Discarding personal information

In principle, the Company immediately discards personal information when a member deletes their account. However, in the event that separate consent is obtained for the retention period for personal information by the data subject, as in the case of Section 1 (Collection of Personal Information) above, or if we are legally obligated to keep personal information for a certain period, we shall keep it securely for said period.

Personal information for which the purpose of collection and use has been achieved, such as membership withdrawal, service termination, and the maturity of the personal information retention period agreed upon by the data subject, is destroyed in a manner that does not allow the information to be reproduced. Information that is legally obligated to be retained for a certain period is also destroyed in a manner that does not allow its reproduction, without delay after the expiration of the period.

Electronic files are securely deleted using technologies and methods to prevent restoration and reproduction, and printouts, etc., are destroyed using methods such as shredding or incinerating.

Personal information retention in accordance with relevant laws

Personal information retention in accordance with relevant laws : Category, Applicable laws and regulations, Period, Items
Category	Applicable laws and regulations	Period	Items
Records of contracts, offer withdrawals, or the like	Act on Consumer Protection in Electronic Commerce, Etc.	Five years	Identification information, contract information, or withdrawal information
Records of payments and supply of goods, etc.		Five years	Identification information, contract information, or withdrawal information
Records of the handling of consumer complaints or disputes		Three years	Identification information, consumer dispute resolution information
Books and supporting documents stipulated by the tax law	Framework Act on National Taxes	Five years	Books and supporting documents
Records on electronic financial transactions	Electronic Financial Transactions Act	Five years	Transaction information
Service visit records	Protection of Communications Secrets Act	Three months	Service visit records (e.g., logs and IP, etc.)
Statements or other similar records	Commercial Law	Five years	Statements and other similar records
Records on processing income tax reports	Income Tax Act	Five years	Records on income tax reports
Records on currency exchanges (foreign currency exchange)	Foreign Exchange Act	Five years	Records on foreign exchange reports

5. Article 5 Rights and Obligations of Data Subjects and Their Legal Representatives and How to Exercise Them

Data subjects (members and their legal representatives) may view or edit their personal information at any time and request withdrawal or termination of consent.

- In the event that a data subject makes a request to correct an error in their personal information, such information is not to be used or provided until the correction is made. If incorrect personal information was provided to a third party, LOTTE HOTELS shall forward the edited information to the third party to ensure the edits are made. [Download Form]
- Offline members
- · Should you make a request in person at a hotel or over the phone, you may view, modify, delete, or suspend processing of your personal information after identity verification. Please check the [contact information for each branch]on the website.
- · If you wish to receive an e-mail and/or a call, please e-mail us at lottehotelrewards@lotte.net or call us at +82-2-759-7671/7672/7673, and we will verify your identity and provide you with the necessary information.
- · For L.POINT members, please call the L.POINT customer center (Tel. +82-1899-8900) and we will assist you as soon as possible after personal verification.
- Online members
- · Rewards members may view or modify their personal information or deactivate their membership on My Page on our website.
- · For L.POINT integrated members, please log in at the “LOTTE HOTELS & RESORTS” website (www.lottehotel.com) and click [My Page > Deactivate My Account > Deactivate L.POINT Membership] to withdraw your online membership.
- Please contact us at privacy@lotte.net for inquiries regarding personal information protection, and we will assist you after personal verification.
- In the event that it is difficult for a data subject to exercise his/her rights, he/she may authorize a legal representative, and the Company may verify the legitimacy of the legal representative.
- (A power of attorney in accordance with Form No. 11 of the Public Notification on the Method of Processing Personal Information must be submitted.) [Download form]
- Your rights to request the suspension of the viewing or processing of your personal information may be restricted by applicable laws and regulations.

How to exercise your rights to refuse consent to the transmission of advertising information

- To unsubscribe from e-mail notifications: Click Unsubscribe at the bottom of the e-mail
- To unsubscribe from text notifications (SMS, LMS, MMS): Use the contact information for text notification unsubscribing at the bottom of the text message
- To unsubscribe via our website: Edit Member Information > Consent/Decline to Request for Use for Marketing
- To unsubscribe via the App: App Settings > Consent/Decline to Request for Marketing (Advertisement) Push Notifications
- Android: Settings > Google > Advertisements > Disable Personalized Ads
- iOS: Settings > Privacy > Advertisements > Restrict Ad Tracking

6. Operation and use of cookies, such as Internet access files

We use cookies to ensure faster, more convenient website use for our website users and to provide personalized services.

What are cookies?
What are cookies? Cookies are very small text files that are stored on the user’s PC by the user's web browser when the user accesses a website.

We use cookies for the following purposes:

- To utilize them as an index of targeted marketing and service reshuffling by analyzing the access frequency, visit hours, etc. of members and non-members, and by understanding their preferences and interests.
- To track information about and services of the Company that users viewed and showed an interest in, to provide personalized services on their next visit.
- The processing of information collected by each service varies depending on the policies of said service, and users may prevent tracking or deny the use of cookies on their browser or refuse automated information collection through the method provided by the service.
- The non-identifying behavioral data that is collected may be used for online advertising purposes through partner companies such as Google AdWords, Google AdSense services, Naver Analytics, Facebook business tools, Kakao Moment, Criteo OneTag, Insider, Rocket Fuel, Salesforce Inc., Treasure Data, Xandr, Yahoo Japan and YouTube. The name or policies of each service is subject to change depending on the circumstances of the company providing marketing or web analytics support services.

Google Analytics

- Overview: Web analytics services provided by Google, which track and report website traffic.
- Service Policy: https://support.google.com/analytics/answer/6004245?hl=ko
- Refusal of collection: https://support.google.com/analytics/answer/9019185?hl=ko

Google AdSense

- Overview: A tool that provides personalized advertisements by evaluating the user’s behavior on a website.
- Service Policy: https://support.google.com/adsense/answer/48182
- Refusal of collection: https://support.google.com/adsense/answer/1348695?hl=ko&ref_topic=9886175

Naver Analytics

- Overview: An analysis tool provided by Naver that tracks the performance of advertisements by evaluating the user’s behavior on a website.
- Service Policy: https://analytics.naver.com/popup/termofuse.html
- Refusal of collection: https://privacy.naver.com/knowledge/cookie?menu=knowledge_info_relation_cookie

Facebook Pixel

- Overview: An analysis tool provided by Facebook that tracks the performance of advertisements by evaluating the user’s behavior on a website.
- Service Policy: www.facebook.com/about/privacy/
- Unsubscribe: https://www.facebook.com/settings/?tab=ads

Kakao Pixel

- Overview: An analysis tool provided by Kakao that tracks the performance of advertisements by evaluating the user’s behavior on a website.
- Service Policy: https://kakaoad.github.io/kakao-pixel/pixel-guide.html
- Refusal of collection: Refusal of collection by refusing the use of cookies

Criteo OneTag

- Overview: A tool that provides personalized advertisements by evaluating the user’s behavior on a website.
- Service Policy: http://help.criteo.com/kb/guide/ko/-bbFLejr6XZ/Steps/1842462
- Refusal of collection: https://help.criteo.com/kb/guide/ko/-bbFLejr6XZ/Steps/1842462

Rocket Fuel

- Overview: A tool that provides optimized advertisements by evaluating the user’s behavior on a website.
- Service Policy: Rfihub.com
- Refusal of collection: Deletion through Google Chrome

Salesforce, Inc

- Overview: A tool that provides personalized advertisements by evaluating the user’s behavior on a website and identifying customers.
- Service Policy: https://www.salesforce.com/privacy/overview/
- Refusal of collection: Refusal of collection by refusing the use of cookies

Treasure Data

- Overview: A tool for analyzing and identifying customers by evaluating a user’s behavior on a website.
- Service Policy: https://www.treasuredata.com/cookies/
- Refusal of collection: Refusal of collection by refusing the use of cookies

Xandr

- Overview: Provision of technology that provides personalized advertisements to users, identifies suitable customers to advertisers, and displays advertisements.
- Service Policy: https://www.xandr.com/privacy/cookie-policy/
- Refusal of collection: https://www.xandr.com/privacy/cookie-policy/

Yahoo Japan

- Overview: Provision of information related to effectively performing marketing activities to partner companies.
- Service Policy: https://privacy.yahoo.co.jp/glossary/cookies.html
- Refusal of collection: https://support.yahoo-net.jp/SccYjcommon/s/article/H000012092

Youtube

- Overview: Including YouTube videos on the website or inserting and using such links.
- Service Policy: https://www.youtube.com/t/terms
- Refusal of collection: https://support.yahoo-net.jp/SccYjcommon/s/article/H000012092

- It is used to verify the extent of members’ participation and visit times at various events hosted by the Company so that the Company may offer specific opportunities for entry and provide individualized information according to their specific interests.
- Users have the option to install cookies. In this way, users may allow all cookies, allow or block cookies individually whenever stored, or block the storage of all cookies by using the settings option in their web browser. However, a user who chooses not to install cookies may experience inconvenience when using the website and have difficulty using some services that require login.

How to choose settings to allow or disallow cookies

1. Internet Explorer: Tools menu at the top of the web browser > Internet options > Personal information > Settings
2. Chrome: Settings menu on the right side of the web browser > Settings > Security and Personal Information Protection > Cookies and Other Site Data Settings
3. Microsoft Edge: Menu > Settings > Personal Information, Search and Services > Prevent Tracking

7. Measures to ensure the security of personal information

The Company makes the following efforts to safely manage the personal information of data subjects.

- We establish and implement internal management plans for personal information protection.
- We establish internal management plans for personal information, including matters related to the operation of personal information protection such as designation of a privacy officer, etc., and annually check whether these internal management plans are being implemented properly.
- We take access control and access authority restriction measures for personal information.
- In order to block illegal access to personal information, we have established and implemented standards for granting, modifying, canceling, etc. access to personal information handling systems, and we have installed and operate intrusion prevention systems and intrusion detection systems. In addition, we reduce the possibility of information leaks in personal information processing systems, by separating the external Internet network and the intranet for work PCs of employees authorized to download personal information.
- We take encryption measures to safely store and transmit personal information.
- Passwords, unique identification information, account numbers, card numbers, etc., are encrypted and stored as prescribed by laws and regulations. In addition, personal information is safely sent and received over the network through encrypted communication, etc.
- Measures are taken to store personal information access records and prevent forgery or alteration.
- Personal information handlers maintain records of access, and the relevant access records are kept securely to ensure that the access records are not forged, altered, stolen, or lost.
- We install and update security programs for personal information.
- To prevent damage to personal information, the data is backed up frequently, and the latest antivirus software is used to prevent users’ personal information or data from being leaked or damaged.
- We take physical measures to safely store personal information.
- To prevent personal information from being leaked or damaged by hacking or computer viruses, etc., systems are set up in the areas with restricted access from outside, and access control procedures are established and operated.

8. Chief Privacy Officer

Chief Privacy Officer : Category, Department name, Name, Contact information
Category	Department name	Name	Contact information
Chief Privacy Officer (CPO)	Information Protection Division	Head of Division Jaekwi Kim	Tel:+82-2-771-1000 E-mail: privacy@lotte.net
Privacy manager	Privacy Team	Director Seong-Woo Cho

9. Matters regarding the operation and management of video information processing devices (stationary and mobile)

1) Basis for installing video information processing devices and purpose of installation

The Company installs and operates video information processing devices (stationary and mobile) for the following purposes in accordance with Article 25 Paragraph 1 and Article 25-2 Paragraph 1 of the Personal Information Protection Act.

A. Stationary Video Information Processing Devices
- - Facility safety and management, fire prevention
- - Crime prevention for customer safety
- - Vehicle theft and damage prevention
- * For a parking lot with a capacity larger than 30 vehicles, devices may be installed and operated based on Article 6 Paragraph 1 of the Enforcement Regulations of the Parking Lot Act.
B. Mobile video information processing devices
- - Customer interviews in the event of a complaint and on-site response
- - Protection of the complaint manager

2) Number of video information processing devices, installation location, and scope of filming

The number of video information processing devices (stationary and mobile) that are operated by the Company, installation locations, and scope of filming are as follows. (As of January 2025)

A. Stationary video information processing devices

Stationary video information processing devices : Category, Quantity installed, Installation locations and scope of filming
Category	Quantity installed	Installation locations and scope of filming
SIGNIEL SEOUL	246	Inside and outside the hotel, parking lots, etc.
SIGNIEL BUSAN	314	Inside and outside the hotel, parking lots, etc.
LOTTE HOTEL SEOUL	638	Inside and outside the hotel, parking lots, etc.
LOTTE HOTEL WORLD	171	Inside and outside the hotel, parking lots, etc.
LOTTE HOTEL JEJU	333	Inside and outside the hotel, parking lots, elevators, etc.
LOTTE HOTEL ULSAN	116	Inside and outside the hotel, parking lots, elevators, etc.
L7 MYEONGDONG	135	Inside and outside the hotel, parking lots, etc.
L7 GANGNAM	225	Inside and outside the hotel, parking lots, etc.
L7 HONGDAE	247	Inside and outside the hotel, parking lots, lounges, ballrooms, etc.
L7 HAEUNDAE	176	Inside and outside the hotel, parking lots, event spaces, etc.
LOTTE City Hotel Mapo	177	Inside and outside the hotel, parking lots, etc.
LOTTE City Hotel Gimpo Airport	82	Inside and outside the hotel, parking lots, etc.
LOTTE City Hotel Guro	99	Inside and outside the hotel, parking lots, etc.
LOTTE City Hotel Myeongdong	171	Inside and outside the hotel, parking lots, etc.
LOTTE City Hotel Jeju	193	Inside and outside the hotel, parking lots, etc.
LOTTE City Hotel Ulsan	148	Inside and outside the hotel, parking lots, elevators, etc.
LOTTE City Hotel Daejeon	151	Inside and outside the hotel, parking lots, elevators, etc.

B. Mobile video information processing devices

When using a mobile image processing device to capture images of a person or an object related to that person, we ensure that the data subject can easily recognize that they are being filmed by directly notifying them or displaying an LED indicator, etc.

Mobile video information processing devices : Category, Device type, Quantity installed, Installation locations and scope of filming
Category	Device type	Quantity installed	Installation locations and scope of filming
LOTTE HOTEL SEOUL	Wearable camera	1	Work site of the complaint manager
LOTTE HOTEL JEJU	Wearable camera	1	Work site of the complaint manager

3) Video information processing device manager and persons with access

A personal video information protection manager is employed to handle any inquiries related to personal video information and to protect your video information.

Video information processing device manager and persons with access : Category, Department, Contact information
Category			Department	Contact information
Administrator		Primary	Information Protection Division	+82-2-771-1000
Administrator		Secondary	Privacy Team	+82-2-771-1000
Stationary	Person with access	SIGNIEL SEOUL	Safety Manager at each hotel branch	+82-2-3213-1131
		SIGNIEL BUSAN		+82-51-922-1301
		LOTTE HOTEL SEOUL		+82-2-759-7777
		LOTTE HOTEL WORLD		+82-2-411-7131
		LOTTE HOTEL JEJU		+82-64-731-4110
		LOTTE HOTEL ULSAN		+82-52-960-4110
		L7 MYEONGDONG		+82-2-6310-1062
		L7 GANGNAM		+82-2-2011-1020
		L7 HONGDAE		+82-2-2289-1003
		L7 HAEUNDAE		+82-51-7001-1005
		LOTTE City Hotel Mapo		+82-2-6009-1045
		LOTTE City Hotel Gimpo Airport		+82-2-6116-1030
		LOTTE City Hotel Guro		+82-2-6210-1045
		LOTTE City Hotel Myeongdong		+82-2-6112-1038
		LOTTE City Hotel Jeju		+82-64-730-1074
		LOTTE City Hotel Ulsan		+82-52-990-1160
		LOTTE City Hotel Daejeon		+82-42-333-1026
Mobile		LOTTE HOTEL SEOUL	Safety Manager	+82-2-759-7777
Mobile		LOTTE HOTEL JEJU	Concierge Manager	+82-64-731-4110

4) Matters related to consigning the installation, operation, management, etc. of video information processing devices

The Company consigns the installation, operation, management, etc. of video information processing devices as follows to provide services, and regulates necessary matters to ensure that personal information is managed safely when a consignment contract is signed in accordance with relevant laws.

Matters related to consigning the installation, operation, management, etc. of video information processing devices : Category, Consigned work, Subcontractor
Category	Consigned work	Subcontractor
SIGNIEL SEOUL	CCTV operation	Proscom Co., Ltd.
SIGNIEL BUSAN		Proscom Co., Ltd.
LOTTE HOTEL SEOUL		Secure Agency
LOTTE HOTEL WORLD		Secure Agency
LOTTE HOTEL JEJU		Hu:corp
LOTTE City Hotel Jeju		Hu:corp
LOTTE HOTEL ULSAN		Freezone Co., Ltd.
LOTTE City Hotel Ulsan		Freezone Co., Ltd.
L7 MYEONGDONG		Angel Staff
L7 GANGNAM		Samkoo Inc.
LOTTE City Hotel Mapo
LOTTE City Hotel Gimpo Airport
L7 HONGDAE		KS Mate Co., Ltd.
L7 HAEUNDAE		S-Tec System
LOTTE City Hotel Guro		The Man
LOTTE City Hotel Myeongdong		Will & Vision
LOTTE City Hotel Daejeon		IBS Industry Corp.

5) Personal video information filming hours, retention period, storage site, and processing method

Personal video information filming hours, retention period, storage site, and processing method : Filming hours, Retention period, Storage site
Filming hours	Retention period	Storage site
24 hours	Within 30 days from the filming date	Stationary	Security office at each branch
		Mobile	(Seoul Hotel) Office in charge of safety management
		Mobile	(Jeju Hotel) Office in charge of the concierge

Processing method: We document and manage matters related to the use of personal video information for purposes other than its intended use, disclosure to third parties, destruction, requests for access, etc. Upon expiration of the retention period, the information is permanently deleted in an irreversible manner (printed materials are disposed of through shredding or incineration).

* However, in exceptional cases, the retention period may be extended if the reason and duration of the extension are confirmed through relevant documentation for the following circumstances.
- If required for a criminal investigation, prosecution, or court-related tasks
- If there are special regulations in other laws

6) Matters related to the procedure for viewing personal video information and the location

- How to view: Contact the person with access to personal video information at the relevant hotel branch to view the information.
- Viewing location: Surveillance camera storage site at each hotel branch

7) Measures regarding the data subject’s request to view personal video information

- If the data subject wishes to view, check the existence of, or delete their personal video information (hereinafter “view”), they may make a request to the video information processing device operator at any time. However, this is limited to personal video information in which the data subject is recorded and video information that is clearly necessary to protect the urgent life, body, or property interests of the data subject.
- If the data subject requests to view their personal video information, they may submit a request to verify the existence of, or to view their personal video information through the designated channel for personal video information (including electronic documents). [Download Form]
- When the Company receives a request from the data subject to view, confirm the existence of, or delete their personal video information, it shall take the necessary actions without delay (within 10 days). In such cases, the Company may verify the identity of the requester using their resident registration card, driver's license, passport, or other proof of identity, to confirm whether they are the data subject or an authorized representative.
- In the following cases, the data subject’s request to view personal video information may be denied. In such cases, the Company shall notify the data subject regarding the reason for the denial in writing, without delay (within 10 days).
- A. If it causes a serious disruption to a criminal investigation, sustainment of a public prosecution, or court case
- B. If the personal video information was deleted due to expiry of the retention period
- C. If there is a serious concern that fulfilling the data subject’s request to view the information may infringe upon another person’s privacy
- D. If there is another legitimate reason to deny the data subject’s request to view the information

8) Measures to ensure the security of personal video information

The Company takes the following administrative, technical, and physical protective measures concerning personal video information.

Measures to ensure the security of personal video information : Category, Contents
Category	Contents
Administrative protective measures	- Establishing and enforcing an internal management plan for safely processing personal video information • Designating a personal video information manager • Matters related to the roles and responsibilities of the personal video information manager and staff • Conducting training for the personal video information staff • Other matters related to the necessary measures for securing the safety of personal video information
Technical protective measures	- Access control for personal video information and restrictions to access - Implementation of technology for safely storing and transmitting personal video information - Measures for storing processing records and preventing manipulation and forgery
Physical protective measures	- Establishing a security office to safely store personal video information or installing locks

10. Duty to notify

支店	子供たち
韓国 (シグニエル釜山/ロッテホテル/L7ホテルバイロッテ/ロッテシティホテル), ロッテアライリゾート	4歳~12歳
シグニエルソウル/ロッテホテルワールド	0歳~12歳
ロッテホテルワールド	満4歳～満12歳（小学校6年生）
L7忠壮バイロッテホテル	1歳~12歳
ロッテホテルグアム	0歳~11歳
ロッテホテルモスクワ	6歳~12歳
ロッテホテルサンクトペテルブルク	7歳~12歳
ロッテホテルウラジオストク	0歳~6歳
ロッテホテルサイゴン	5歳~11歳
ロッテホテルハノイ, ロッテホテルヤンゴン, L7ウェストレイクハノイバイロッテホテル	6歳~11歳
ニューヨーカーホテルバイロッテホテル	0歳~17歳

クッキー	ドメイン
incap_ses_, nlbi_, visid_incap_*	.lottehotel.com
globalNetFunnel, NetFunnel_ID, analyticsCookie, checkCooKie, essentialCookie, maketingCookie	www.lottehotel.com

クッキー	ドメイン
MR, SRM_B	.c.bing.com
ANONCHK, SM, MUID, _clck, _clsk, CLID	clarity.ms
datr, _fbp	facebook.com
__Secure-3PAPISID, __Secure-3PSID. __Secure-3PSIDCC, __Secure-3PSIDTS, NID	google.com
ar_debug	googleadservices.com
_ga, _ga_, _gat_UA-, _gcl_au, _gid, ar_debug	google-analytics.com
__Secure-YEC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, YSC, __Secure-ROLLOUT_TOKEN, LOGIN_INFO	youtube.com
__duetto	duettocloud.com
_hjSessionUser_, _hjSession_	hotjar.com