Enacted: 2018.7.16.

DIVEBNB Co., Ltd. (hereinafter referred to as the “Company”) makes its best efforts to protect the management information and personal information and guarantee the rights of Scuba Dive Resort and Liveaboard (hereinafter referred to as the “Company”). I'm doing everything.

The company accepts and complies with the 'Information Processing Policy' in accordance with the standards set by relevant laws and social norms. For what purposes and procedures is management and personal information being collected and used, and what measures are being taken to protect information? We will keep you informed as to whether it is available.

If we revise the information processing policy in this regard, we will notify you in advance through the company website.

In accordance with Article 30 of the Personal Information Protection Act, DIVEBNB Co., Ltd. establishes and discloses personal information processing guidelines as follows in order to protect the personal information of information subjects and to promptly and smoothly handle complaints related thereto.

Article 1. Purpose of processing personal information

DIVEBNB Co., Ltd. processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

① Website membership registration and management 

 - Confirmation of intention to become a member, identification and verification of identity through provision of membership services, maintenance and management of membership, identity verification through implementation of limited identity verification system, prevention of illegal use of services, consent of legal representative when processing personal information of children under 14 years of age.

 - Personal information is processed for the purposes of confirmation, various notices/notifications, and grievance handling. 

② Provision of goods or services 

- Personal information is processed for the purposes of product delivery, service provision, contract/invoice sending, content provision, customized service provision, identity verification, age verification, bill payment/settlement, and debt collection. 

③ Grievance handling 

- Personal information is processed for the purposes of verifying the identity of the complainant, confirming complaints, contacting and notifying for factual investigation, and notifying processing results.

Article 2. Processing and retention period of personal information

① DIVEBNB Co., Ltd. processes and retains personal information within the personal information retention and use period in accordance with the law or within the personal information retention and use period agreed upon when collecting personal information from the information subject. 

② The processing and retention period for each personal information is as follows.

    1. Website membership registration and management: Until withdrawal of business/organization website (However, in the case of the following reasons, until the end of the relevant reason )

        1) If an investigation, investigation, etc. is in progress for violation of relevant laws and regulations, until the end of the investigation or investigation, etc. 

        2) If a bond/debt relationship remains due to use of the website, it will remain until the relevant bond/debt relationship is settled.

    2. Provision of goods or services: Until completion of supply of goods or services and completion of fee payment/settlement (however, in the following cases, until the end of the relevant period)

        1) Records of transactions, such as labeling, advertising, contract details and performance, in accordance with the Act on Consumer Protection in Electronic Commerce, etc. 

            - Records on labeling and advertising: 6 months 

            - Records of contract or subscription cancellation, payment, supply of goods, etc.: 5 years 

            - Records of consumer complaints or dispute resolution: 3 years 

        2) Storage of communication confirmation data in accordance with Article 41 of the 「Communication Secrets Protection Act」

            - Subscriber telecommunication date and time, start and end time, counterpart subscriber number, frequency of use, sending base station location tracking data: 1 year 

            - Computer communication, internet log records, access point tracking data: 3 months

Article 3. Rights, obligations and exercise methods of information subjects

① The information subject may exercise the following rights related to personal information protection against DIVEBNB Co., Ltd. at any time. 

    1. Request to view personal information

    2. Request for correction if there is an error, etc.

    3. Request for deletion 

    4. Request to suspend processing  

② Rights pursuant to Paragraph 1 may be exercised to DIVEBNB Co., Ltd. through writing, phone, e-mail, facsimile (FAX), etc., and DIVEBNB Co., Ltd. will take action without delay. 

③ If the information subject requests correction or deletion of errors in personal information, DIVEBNB Co., Ltd. will not use or provide the personal information until correction or deletion is completed. 

④ Rights under paragraph 1 may be exercised through an agent, such as the information subject's legal representative or a person authorized to do so. In this case, you must submit a power of attorney in the format of Appendix 11 of the Enforcement Rules of the Personal Information Protection Act. 

⑤ The information subject shall not infringe on the personal information and privacy of the information subject or others processed by DIVEBNB Co., Ltd. in violation of relevant laws, such as the Personal Information Protection Act.

Article 4. Personal information items processed

DIVEBNB Co., Ltd. processes the following personal information items.

① Website membership registration and management

    -Required items: name, date of birth, ID, password, address, phone number, gender, email address, i-PIN number 

    -Optional items: marital status, areas of interest 

② Provision of goods or services  

    - Required items: Payment information such as name, date of birth, ID, password, address, phone number, email address, i-PIN number, credit card number, bank account information, etc.

    -Optional items: Area of ​​interest, past purchase history  

③ The following personal information items may be automatically created and collected during the use of Internet services. 

    -IP address, cookie, MAC address, service use record, visit record, bad use record, etc.

Article 5. Destruction of personal information

① DIVEBNB Co., Ltd. destroys the personal information without delay when the personal information becomes unnecessary, such as when the personal information retention period has elapsed or the purpose of processing has been achieved. 

② In cases where personal information must continue to be preserved pursuant to other laws and regulations despite the expiration of the personal information retention period agreed upon by the information subject or the purpose of processing has been achieved, the personal information shall be transferred to a separate database (DB) or storage location changed. Save it differently. 

③ The procedures and methods for destroying personal information are as follows. 

1. Destruction procedure 

    - DIVEBNBCo., Ltd. selects the personal information that requires destruction and destroys the personal information with the approval of DIVEBNB Co., Ltd.’s personal information protection manager. 

2. Method of destruction 

    - DIVEBNB Co., Ltd. destroys personal information recorded and stored in the form of electronic files using methods such as low level format so that the records cannot be reproduced,

            and personal information recorded and stored in paper documents is destroyed.

            Personal information is destroyed by shredding or incineration.

Article 6. Measures to ensure the safety of personal information

DIVEBNB Co., Ltd. is taking the following measures to ensure the safety of personal information. 

① Management measures: Establishment and implementation of internal management plan, regular employee training, etc. 

② Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, etc., installation of security programs. 

③ Physical measures: Access control to computer rooms, data storage rooms, etc.

Article 7. Matters related to the installation, operation and refusal of automatic personal information collection devices

① The company uses ‘cookies’ to store usage information and retrieve it from time to time in order to provide individualized services to users.

② Cookies are a small amount of information that the server (http) used to run the website sends to the user's computer browser and are sometimes stored on the hard disk of the user's PC computer.

1. Purpose of use of cookies: They are used to provide optimized information to users by identifying visitation and usage patterns, popular search terms, secure access, etc. for each service and website visited by the user.

2. Installation, operation and refusal of cookies: You can refuse the storage of cookies through option settings in the Tools>Internet Options>Personal Information menu at the top of your web browser.

3. If you refuse to store cookies, you may have difficulty using customized services.

Article 8. Personal information protection officer

① DIVEBNB Co., Ltd. is responsible for overall work related to personal information processing, and has designated a personal information protection manager as follows to handle complaints and provide relief for damage from information subjects related to personal information processing. 

▶ Personal information protection officer 

Name: Lee Soon-jin

Position: CEO 

Contact: 1670-3868 : 1670-3868, jiny@divebnb.net

※ You will be connected to the personal information protection department. 

▶ Personal information protection department 

Department Name: IT Team 

Person in charge: Jeong Jae-heon 

Contact: 1670-3868 : 1670-3868, it@divebnb.net

② Information subjects may inquire about all personal information protection-related inquiries, complaint handling, damage relief, etc. that arise while using the services (or business) of DIVEBNB Co., Ltd. to the personal information protection manager and responsible department. DIVEBNB Co., Ltd. will respond and process inquiries from information subjects without delay.

Article 9. Request to view personal information

The information subject may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the department below. DIVEBNB Co., Ltd. will strive to promptly process the information subject's request to view personal information. 

▶ Personal information access request reception and processing department 

Department Name: IT Team 

Person in charge: Jeong Jae-heon 

Contact: 1670-3868 : 1670-3868, it@divebnb.net

Article 10. Relief for infringement of rights

Information subjects can inquire about damage relief and consultation regarding personal information infringement to the organizations below. 

▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency) 

- Responsibilities: Reporting personal information infringement, requesting consultation 

- Website: privacy.kisa.or.kr 

-Phone: (without area code) 118 

- Address: Personal Information Infringement Reporting Center, 3rd floor, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2, Bitgaram-dong) (58324)

▶ Personal Information Dispute Mediation Committee

- Responsibilities: Request for personal information dispute mediation, group dispute mediation (civil resolution) 

- Website: www.kopico.go.kr 

- Phone: (without area code) 1833-6972

- Address: (03171) 4th floor, Seoul Government Complex, 209 Sejong-daero, Jongno-gu, Seoul

▶ Supreme Prosecutors' Office Cyber ​​Crime Investigation Team: 02-3480-3573 (www.spo.go.kr)

▶ National Police Agency Cyber ​​Safety Bureau: 182 (http://cyberbureau.police.go.kr)

Article 11. Personal information collection method

① If the user agrees to the collection of personal information and enters the information directly during membership registration and service use, the personal information is collected.

② During the consultation process through the customer center, the user's personal information may be collected through web pages, email, fax, phone, etc.

③ Personal information may be collected in writing at offline events, etc.

④Personal information may be provided from an external company or organization affiliated with the company. In this case, the affiliate must obtain consent from the user to provide personal information.

⑤ Members under the age of 14 must obtain consent from their legal representative to use the service.

2020.07.17.