Privacy Policy

The privacy policy for website members of Korean Air Co., Ltd. (hereinafter “Korean Air”) is for personal information protection of members registered on the website and securing information and communication network safety. Korean Air will exert its utmost efforts to protect the personal information of members, and to prevent illegal release of personal information or occurrence of losses. The privacy policy of Korean Air may be subject to revisions of Korean laws and changes in governmental directives or internal directives of Korean Air. Thus, please confirm your information frequently.
	Protection of Personal Information
	A. Personal Information to be Collected The following personal information is collected (only information required for payment, survey, automatically-generated personal information and event promotion shall be collected for non-members): <Account Information> i) Required Information: user ID, password, hint, name (Korean/English), resident registration number, date of birth, gender, postal address (home/office) and contact information (i.e. telephone, mobile phone, e-mail) ii) Optional Information: occupation, area of business, hobbies, religion and wedding anniversary iii) Children under 14 must provide the name, relationship and resident registration number of their guardians in Korean, e-mail and Skypass No. (optional) <Additional Information> The following additional information is required to make payment when you purchase our products and service including tickets: i) Credit Card: card number, expiration date, password and resident registration number. ii) Bank Transfer: bank name and account number/password The following information is required for the online registration of Skypass family members to prove family relationship: i) copy of resident registration certificate or certificate of kinship Contact customer service center for inquiry (non-members) i) name, contact information and e-mail, Skypass No. or resident registration number <Automatically Generated Information > In addition, the following information can be collected when using or processing service: - service record data, access log, cookies, IP information and payment records B. How to Collect Personal Information Korean Air collects personal information in the following ways: i) registration of membership via website, written application form, phone, fax and e-mail, purchase record from in-flight tax free shops, bulletin board (customer feedback) service provided by Korean Air, and applying for prize giveaway events ii) collecting generated information using system tools C. Purpose of Collecting & Using Personal Information Korean Air does not use personal information for any purpose other than stated in this article without the user’s permission unless required by law. <Settlement of Payment for Execution of Agreement and Providing Service> providing contents, booking/ticketing, delivery of products including tickets, sending bills, certification for banking service, purchase and fee payment, and collecting fee <Account Management> security process, membership certification/identification, prevention of abuse and unauthorized access, checking intent to create account, restriction on account creation, checking the consent of legal guardians for children under 14, maintaining records for dispute resolution, handling complaints and announcement <Marketing and Advertisement> development and specialization of service, providing service and posting AD based on statistical data, monitoring access frequency, statistics for user and information for event promotion D. Disclosure of Personal Information Unless required by law, Korean Air does not provide any third party with personal information without the user’s permission. However, Korean Air may offer your personal information to our affiliates and sponsors solely for the purpose of improving service quality. In this case, we will individually notify you of relevant information, the purpose of offer and content of information in writing or via e-mail, otherwise, it will be notified on the website requiring your permission (Ex: by clicking the mouse on the consent button). E. Outsourcing Personal Information Handling Korean Air outsources services handling personal information to provide service and execution of contract. - IBM Korea: outsourcing system resources including web server and database to provide website service - Hanjing Information Systems & Telecommunication, UB Comtech, Hangil Information & Technology, Golden Touch, Need Creo, Onit System: outsourcing website program development and maintenance - TOPAS: air travel service including booking and ticketing - Amadeus IT Group S.A.: online booking service for flights originating abroad - KICC (Korea Information & Communications), KOVAN (Korea VAN Service), KIS Information Communication, KMPS (Korea Mobile Payment Service), KSNET: payment service such as ticketing - Seoul Credit Rating & Information: certification/identification service - Korea Postal Delivery Service, Hanjin Delivery Service: delivery service for tickets and prizes - Arreo Networks: SMS for announcement/notification - SK Marketing & Company: OK Cashbag points service for online ticketing F. Term for Retaining and Using Personal Information Personal information collected upon your consent may be retained and used while you are serviced by the Internet website of Korean Air. We will destroy all personal information in our possession immediately it is no longer necessary for the purposes for which it was collected if: - users request withdrawal of membership or lose membership status (for membership information); - the survey or event for which the information collected temporarily ends; or - business operation closes. However, we notify or clearly state the terms of retaining and using your personal information in advance if required by the applicable provisions of the Consumer Protection Act in Commercial Law and E-Commerce Act even after it becomes no longer necessary for the purposes for which it was collected. G. Destroying Personal Information   Korean Air destroys personal information immediately after it becomes no longer necessary for the purposes for which it was collected in accordance with the following procedure:   - Procedure The information provided by you when creating your account will be destroyed when it becomes no longer necessary for the purposes for which it was collected, after being retained for a certain period of time according to our internal policies and applicable laws. Please refer to the Term for Retaining and Using Personal Information for more details. - Method Printed materials containing personal information are shredded or burnt while computer files are electronically deleted in such a way that they are completely beyond recovery. H. Rights of Users and Legal Guardians Users may request their personal information be accessed or corrected if it is incorrect at any time and withdraw their permission to collect, use and provide their personal information. Please visit our website (www.koreanair.com) to access or edit your personal information, or withdraw your permission to collect and use personal information. You may request such withdrawal in writing or via phone/e-mail (cyberkal@koreanair.com) if you provide information required for the identification procedure. <How to access, edit and withdraw your personal information> To access your personal information, you need to login to our website and click “Change Personal Information’”. You may also edit your personal information or withdraw your permission (terminate account) by clicking “Change Personal Information’’” or “Internet Membership Withdrawal”. I. Automatic Collection of Personal Information and Refusal To serve customers in a more efficient way, Korean Air uses cookies. Cookies are data packs which the server operating the Korean Air website sends to the user's browser and is normally stored in the user's hard disk. Cookies are used to recognize a user's computer but it is impossible to identify the individual user. Korean Air uses cookies for the following purposes: i) membership certification ii) to gather access information including frequency and time, track data and identify the number of accesses to improve website service and marketing activities. You have options to allow or not allow saving cookies. You may set your browser (Tool s> Internet Options) to allow cookies all the time or selectively, or refuse to save cookies. If you refuse to save cookies, certain services may not be available. J. Person in Charge of Personal Information The person in charge of managing personal information of Korean Air is as follows: - Department/Position/Name: Passenger Marketing Department / Vice President/ Suk-wan Kim - General Inquiry e-mail: cyberkal@koreanair.com, Tel : +82-2-2656-2300 Under the strict supervision of the above person, we promise to ensure the highest level of security when it comes to protecting your personal information so you may feel comfortable using our website.
	Settlement of Claims Related to Personal Information
	Users may request or require claim settlement with regard to personal information through the following methods. Korean Air will take action immediately when receiving the claim and will notify you of the result of settlement. - E-mail: Receive claims through "Contact Us" on the Korean Air website.
	Personal Information of Children
	Korean Air collects and uses children's personal information when children are under fourteen and request to be an Internet member after completing the confirmation process of receiving a legal proxy's (guardian's) consent. The legal proxy may remove approval in the same way as in Article H, and may request the removal of perusal of personal information offered by children or the correction of errors. Korean Air shall instantly take the necessary actions on the request for the removal of consent and correction of errors after confirming the member's identification.
	Technical and Administrative Measures
	Korean Air prepares various security devices as technical measures to protect your personal information. All information offered by you is retained and managed by a security system, which is protected by dual firewall devices. Also, Korean Air prepares necessary procedures for the access and management of your personal information as an administrative measure for your personal information protection. Korean Air limits the number of personnel responsible for managing personal information and offers consistent security training programs to them. In addition, Korean Air shall update user passwords on a regular basis by appointing system users who deal with personal information and endowing user passwords to them.
	Revision of Privacy Policy
	Korean Air shall strictly obey personal information protection-related laws, including Korean laws on the promotion and protection of information communication network use, basic laws on e-commerce, and e-commerce consumer protection directives. Thus, the privacy policy of Korean Air may be altered due to revisions in related Korean laws and governmental directives. Korean Air will publish notification of date, causes and contents of revisions on the Internet website in the event of making revisions. - This Online Privacy Policy of Korean Air has been in force since November 1, 2000. - Version of Privacy Policy: v3.0 - Date of Effect: November 1, 2000 - Revision History   ○ July 29, 2002: Privacy Policy for Children   ○ February 12, 2004: Users’ right to withdraw their permission, access and request correction (v1.1)   ○ January 1, 2005: Enforcement of Privacy Policy for global websites (v2.0)   ○ February 16, 2010: Revisions: According to the revision of Information Communication Network Act, Changing the title of “Privacy Policy”, Personal Information to be Collected, Purpose of Collecting and Using Personal Information, Term for Retaining and Using Personal Information, Rights of Users and Legal Guardians, Automatic Collection of Personal Information and Refusal. Additions: How to Collect Personal Information, Outsourcing Personal Information Handling, Destroying Personal Information (v3.0)