Online Privacy Policy

This Privacy Policy applies to those who use the Korean Air's website (www.koreanair.com) including both its members and non-members (hereinafter referred to as the “Users”) for the protection of privacy and network security. Korean Air protects the personally identifiable information of Users (hereinafter the “PII”) and prevents any illegal disclosure of such information and loss thereof to the best of its ability. The Privacy Policy of Korean Air is subject to change at any time without notice in accordance with laws or company regulations, so it is recommended that individuals refer back to this statement periodically.
1. Protection of Personally Identifiable Information (“PII”)
	A. Personally Identifiable Information (“PII”) Korean Air collects the following information, provided, however that for non-members, only required information shall be submitted for the purpose of payment, survey, automatic generation of PII and event participation. <Signing Up for Membership> i) Required Fields: User ID, Password, Hint, Name (Korean & English), Resident Registration No. (SSN), Date of Birth, Gender, Address (Home/Office), Contact Information (Tel., M.P., E-mail) ii) Optional Fields: Occupation, Industry, Hobby, Religion, Wedding Anniversary iii) Person under the Age of Fourteen: Legal Guardian’s Name, Relationship, Resident Registration No. (SSN), E-Mail, Skypass Membership No. (Optional) <Additional Information> For the purpose of ticketing or paying for services, Users are required to provide the following information: i) Credit Card Payment: Credit Card No. Expiry Date, Security Code, Resident Registration No. (SSN) ii) Account Remittance: Bank, Account No., Password In addition, you may be required to submit a copy of the following documents to register membership for your family members. i) Resident Registration Certificate or Family Registration Certificate In order to receive customer service from Support Center, you are required to provide the following information: i) Name, Contact Information, E-mail, Skypass No. or Resident Registration No. (SSC) <Automatically Generated Information> Finally, the following information may be collected during the course of processing services. - Service Records, Access, Login, Cookie, IP Address, Payment Record, etc.
	B. Collecting “PII” Korean Air collects PII by using the following means: i) Website, Written Form, Telephone, Fax, E-mail, On-board Duty Free Shopping, Voice of Customer, Korean Air Bulletin Board and Promotional Event. ii) Applicable Information Management Tool
	C. Purpose of Collecting “PII” Korean Air does not use the PII for any purpose other than as stated in this article unless it is required by laws or applicable regulations. <Performance of service and its payment> Providing contents, ticketing, delivery of goods and invoices, certification for bank transaction, banking service, purchase, payment and collection of fees <Membership management> User identification, prevention of membership abuse and unlicensed user of service, confirmation of membership registration, regulating membership registration, validation of legal guardian consent, maintaining record for dispute resolution, customer service and announcement <Marketing & Advertisement> Service development and specialization, statistical service offer and publication, identification of access frequency, user statistics, and promotional events and information
	D. Disclosure of PII Korean Air does not disclose PII to any third party unless it is required by laws, provided, however, it can disclose PII to its affiliates or sponsors in order to provide its members with the highest-quality service. In this case, Korean Air notifies such disclosure to an individual user in writing or through e-mail specifying the purpose and contents of such information as well as its duration and may require users to express affirmative consent online.
	E. Entrusting PII Korean Air entrusts PII to the following companies in compliance with contracts in order to provide Users with services:
	-IBM Korea: Web server and database outsourcing for online service -Hanjin Information System & Telecommunication Co., Ltd., UB Comtec Co., Ltd., Hangil Information & Technology Co., Ltd., Golden Touch Co., Ltd., Need Creo Co., Ltd., IT System Co., Ltd.: Website management program and outsourcing -TOPAS Co., Ltd.: Ticketing and airline services -Amadeus IT Group S.A.: Online booking service for overseas departure -KICC (Korea Information & Communications Co., Ltd.), KOVAN, KIS Information & Communication Inc., KMPS (First Data International Korea Co., Ltd.), KSNET Inc.: Payment service for ticketing and other services -Seoul Credit Rating & Information Inc.: User identification -Korea Post, Hanjin Transportation Co., Ltd.: Delivery of tickets and event prizes -Arreo Networks Co., Ltd.: SMS service for news and notices -SK Marketing & Company Co., Ltd. : Offer OK CASHBAG points upon the request of online ticket purchaser
	F. Terms & Duration of PII Korean Air retains and uses PII as long as the User uses its online service. The Company destroys whole or any part of PII immediately when its purpose has been served as follows:
	- Membership Information: Upon the termination of membership - Information collected temporarily for survey or event: When applicable survey or event expires. - Termination of Business
	However, Korean Air may retain whole or any part of PII even after its purpose has been served, if it is required by laws or applicable regulations in terms of consumer protection or if Korean Air has specified the extension of such a period as deemed necessary.
	G. Disposal of PII Korean Air destroys whole or any part of PII immediately when its purpose has been served as follows:
	-Procedure The information submitted by members for the purpose of membership registration is stored for a certain period of time in accordance with the company internal policy and applicable laws for the protection of privacy before it is destroyed. -Method Hardcopy that contains PII is shredded by a shredder whereas softcopy is deleted without possibility of recovery.
	H. Right of Users & Legal Guardians Users retain the right to view their own PII retained by Korean Air or request it to be modified if it contains any false information. In addition, users are allowed to withdraw the consent they have initially provided to Korean Air for the collection and use of such information. Users are able to view and modify their PII as well as withdraw the initial consent through the website (kr.koreanair.com) or by writing, calling on the phone or sending E-mail to cyberkal@koreanair.com. Korean Air responds to their request accordingly after conducting user identification process. <Viewing, Modifying and Withdrawing PII> Users can log on to the Korean Air website and view/modify their PII by clicking on the menu. In order to withdraw their PII, Users need to terminate their membership through the website.
	I. Operation of Information Collecting Application Korean Air installs and operates the information collecting application that uses “cookie” to store visitors’ online information. A "cookie" is a small piece of information sent by a web server to store on the hard disk of a web browser client so it can later be read back from that browser client. By using “cookie”, the server can detect your computer; however, it is not able to identify you individually. Korean Air uses cookies for the following purposes: i) User certification ii) Collects statistics on access frequency and time, tracing, for the improvement of service and marketing. You are free to decline “cookie” files if your computer browser has been set to prompt or decline “cookie” files. However, you may encounter difficulty using some of our services if you decline cookie files.
	J. Administration of PII The administrator for PII and their contact information are as follows: Div./Job Title: Passenger Strategy Development Div. / Managing Director Name/Tel.: Ma, Won ☎ 02-2656-7678 General Inquiry: ☎ 02-2656-2300 (Work hours: Mon-Sat 08:30-19:30) E-mail: cyberdesk@koreanair.com The above personnel secures your valuable information to the best of his/her ability in order to provide high-quality services
2. Feedback & Customer Service If you have any inquiries or feedback regarding your PII, please register through the following contact information. It will be responded to shortly. Online: Register on “Contact Us” Customer Service Center: Tel. 080-023-7770
3. Legal Guardian Korean Air requires parental or legal guardian consent in order to collect the PII of a child under the age of fourteen. Legal guardians may withdraw their consent as specified in Item H, and view or modify the information provided by the child. Korean Air responds to such request accordingly after conducting user identification process.
4. Technical & Administrative Measures Korean Air has implemented several technical security measures for the purpose of protecting PII. All the information submitted by Users is managed by a security system equipped with a highly secure firewall. In terms of administrative measures, various effective procedures are taken to assure the highest level of security. In addition, the number of personnel who have access to PII is reduced to the minimum while security training programs are provided on a continuous basis. Also, a password is applied to those who operate PII processing system and it is renewed regularly.
5. Amendment of Privacy Policy Korean Air complies with all applicable laws and regulations including Information Network Act and Protection of Privacy, Credit Information Regulation, Electronic Commerce Standards, Electronic Commerce Consumer Protection Act and Privacy Protection Law. In consequence, Korean Air’s Privacy Policy is subject to change at any time in accordance with applicable laws. Such changes are announced on the website in detail.
- Korean Air’s Online Privacy Policy is effective on November 1, 2000. - Privacy Policy Version: v3.0 - Privacy Policy Date of Enforcement: November 1, 2000. - Privacy Policy Amendments
o July 29, 2002: Policy regarding “Legal Guardian” was amended o Feb 12, 2004: “User Right” including access, modification and withdrawal of consent was amended o June 20, 2007: Policy regarding “Purpose” and “PII” was amended (v2.1) o Nov 2, 2007: Amended as follows: PII, Purpose, Period, Legal Guardian Right and Operation of Information Collecting Application Addendum: “Collecting PII”, “Entrusting PII”, “Disposal of PII” (v3.0)
※ This is a translated version of Online Privacy Policy originally prepared in Korean. If any discrepancy in meaning may occur between the translated version and the original Korean version, the original Korean version acts as the superceding documentation.

Privacy Policy

The privacy policy for website members of Korean Air Co., Ltd. (hereinafter 'Korean Air') is on personal information protection of members registered on the website and securing information and communication network safety. Korean Air will exert its utmost effort in protecting personal information of members, and preventing illegal release of personal information or occurrence of losses. The privacy policy of Korean Air might be subject to revisions in Korean laws and changes in governmental directives or internal directives of Korean Air. Thus, please confirm your information frequently.
	Personal Information Protection
	A. Person in Charge of Personal Information The person in charge of managing personal information of Korean Air is as follows. Department/Position: Passenger strategy development department, Managing director - Name: Ma, Won - e-mail: cyberdesk@koreanair.com - Tel: +82-2-2656-7678 * With the above-named person's assistance, you can feel secure in using Korean Air's website. B. Collection of Personal Information and Purpose of Use Korean Air collects minimal information required for supply of goods and/or services such as order, reception, payment and delivery of goods and optimal services offered to you through the Internet website. Korean Air shall not use personal information collected without members' consent for purposes other than the above-mentioned purposes. Also, Korean Air will receive members' consent in advance when Korean Air intends to use personal information for purposes out of the above-mentioned scope. (Ex: click the mouse on the consent button) C. Indication to Person Receiving an Offer by Information, Purpose of Offer, and Contents of Information to be Offered in the Event of Offering Personal Information to a Third Party. Korean Air does not offer personal information to a third party without the members' consent, with exclusion of exceptional cases prescribed by laws. However, Korean Air may offer your personal information to our cooperative companies and sponsors. Yet, this is only intended to offer optimal quality service to you. In addition, we will individually notify you of information, purpose of offer and content of information to be offered by e-mail or letter. Also, we will receive your consent (Ex: by clicking the mouse on the consent button) by clearly stating such on the Internet website. D. Users' Rights Such as Removal of Consent, Perusal, or Request for Modification, and Methods of Exercising Those Rights Korean Air may collect, use or transfer personal information only if you agree when joining the internet membership. You can withdrew whatever you agreed anytime. You can use the website to terminate your membership or contact Customer Service Center to take necessary measures including deleting personal information. E. Privacy policy of Children Korean Air collects and uses children's personal information when children are under fourteen and request to be an Internet member after completing the confirmation process of receiving a legal proxy's (guardian's) consent. Legal proxy may remove the approval through the same way as in Article D, and may request the removal of perusal of personal information offered by children or the correction of errors. Korean Air shall instantly take the necessary actions on the request for the removal of consent and correction of errors after confirming the member's identification. F. Items of Personal Information that Service Provider Intends to Collect Korean Air shall collect the following as items necessarily required for the establishment of contract (member registration) and performance (delivery of goods and payment), new service, new product, and event information. You may voluntarily choose whether you will be offered those selective items when registering as a member. - ID - Password - Hint - Name (Korean/English) - Year/Date of Birth (Those who live in Korea and would like to be a KoreanAir's member   must fill in their resident registration number.) - Address and Contacts - City Information (nearby city, frequently visited city) - Mailing Address G. Terms of Preservation and Use of Personal Information Collected Personal information collected upon your consent may be preserved and used while you are serviced by the Internet website of Korean Air in principle. In the event that you request withdrawal of membership or lose member qualification, your personal information shall be instantly deleted and we shall treat it in such a way that it cannot be used and/or reused for any reason or purpose, or in any way. However, we shall notify or clearly state terms of preservation and use of personal information after establishing them in the event that it is required for calculation of usage fees, collection of arrears, and preparation for lawsuits and/or disputes.
	Items on the Operation of Cookies
	To serve customers in a more efficient way, Korean Air uses cookies. Cookies are data packs which the server operating the website sends to user's browser. They are usually stored in user's hard disk. Cookies are used to recognize user's computer but impossible to identify individual user. As a member, you can choose to allow the use of cookies. If you allow to use cookies and access www.Koreanair.com next time, this will automatically connect you to the region/language that you initially selected. You can allow all the cookies to be used, confirm whenever cookies are stored or refuse to save all the cookies. If you refuse to save cookies, a wide range of Korean Air services may not be available.
	Technical and Administrative Measures
	Korean Air prepares various security devices as technical measures for protecting your personal information. All information offered by you is preserved and managed by a security system, which is protected by double firewall devices. Also, Korean Air prepares necessary procedures for the access and management of your personal information as an administrative measure for your personal information protection. Korean Air limits the number of personnel responsible for managing personal information and offers consistent security education to them. In addition, Korean Air shall regularly update user passwords by appointing system users that deal with personal information and endowing user passwords to them.
	Items on the Settlement of Claims Related to Personal Information
	You can request or require claim settlement with regard to personal information through the below methods. Korean Air will instantly take action as soon as Korean Air receives the claim and will notify you about the settlement outcome. - Internet: Receive claims through "Contact Us" on the Korean Air website. - Customer Service Center: Receive claims by phone 080-023-7770.
	Items on Revision of Privacy policy
	Korean Air shall strictly obey personal information protection related laws, including Korean laws on the promotion and protection of information communication network use, basic laws on e-commerce, and e-commerce consumer protection directives. Thus, the privacy policy of Korean Air may be altered due to revisions in related Korean laws and governmental directives. Korean Air will publish notification of date, causes and contents of revisions on the Internet website in the event of making revisions. - The privacy policy for Internet members of Korean Air has been in force since the 1st of   November 2000. - It was revised due to changes in items of children's privacy policy on July 29, 2002. - The privacy policy for the Global Website members of Korean Air shall be enforced as of   January 1, 2005.