Enactment: 2018.7.16.

Dive B&B Co., Ltd. (hereinafter referred to as the'Company') makes its best efforts to protect management information and personal information of Scuba Dive Resort and Liveaboard (hereinafter referred to as the'Company') and to guarantee rights and interests. I'm doing it all.

The company accepts and complies with the'information processing policy' in accordance with the standards and social regulations stipulated in the relevant laws. Management and personal information is collected and used for what purpose and procedure, and what measures are taken to protect information We will keep you informed.

If the information processing policy is revised, we will notify you in advance through the company website.

DiveBNB Co., Ltd. establishes and discloses personal information processing guidelines as follows in order to protect the personal information of the information subject in accordance with Article 30 of the Personal Information Protection Act and to deal with related grievances quickly and smoothly.

Article 1. Purpose of processing personal information

DiveBNB Co., Ltd. processes personal information for the following purposes. The personal information being processed is not used for purposes other than the following purposes, and if the purpose of use changes, we will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Homepage member registration and management

Confirmation of intention to sign up as a member, identification and authentication according to the provision of membership services, maintenance and management of membership qualifications, identification according to enforcement of the limited identification system, prevention of illegal use of services, and consent of the legal representative when processing personal information of children under 14 years of age Personal information is processed for the purpose of verification, various notices and notifications, and grievance handling.

2. Provision of goods or services

Personal information is processed for the purpose of delivering goods, providing services, sending contracts and invoices, providing content, providing customized services, verifying identity, age verification, payment and settlement of charges, and collection of bonds.

3. Grievance handling

Personal information is processed for the purpose of confirming the identity of the complainant, confirming the complaints, contacting and notifying for fact-finding, and notifying the results of processing.

Article 2. Processing and retention period of personal information

① DiveB&B Co., Ltd. processes and retains personal information within the period of retention and use of personal information in accordance with the law or within the period of personal information retention and use agreed upon when collecting personal information from the information subject.

② Each personal information processing and retention period is as follows.

1. Homepage member registration and management: Until business/group homepage withdrawal

However, in the case of any of the following reasons, until the end of the reason

1) If an investigation or investigation in violation of related laws is in progress, until the end of the investigation or investigation

2) In the case of the remaining bond/debt relationship due to use of the website, until the settlement of the relevant bond/debt relationship

 

2. Provision of goods or services: Until the completion of supply of goods and services, payment of fees, and settlement

However, in the case of the following reasons, until the end of the period

1) Records on transactions such as display, advertisement, contract details, and performance in accordance with the 「Consumer Protection Act in Electronic Commerce, etc.」

-Records on labeling and advertisement: 6 months

-Records of contract or subscription withdrawal, payment, and supply of goods: 5 years

-Records on consumer complaints or dispute settlement: 3 years

2) Storage of communication fact confirmation data pursuant to Article 41 of the 「Communication Secret Protection Act」

-Subscriber telecommunication date and time, start/end time, other party's subscriber number, frequency of use, location tracking data of the sending base station: 1 year

-Computer communication, Internet log record data, access point tracking data: 3 months

Article 3. Rights and obligations of the information subject and method of exercise

① The information subject can exercise the following rights related to personal information protection at any time to DiveB&B.

③ If the information subject requests correction or deletion of personal information errors, DiveB&B will not use or provide the personal information until the correction or deletion is completed.

④ The exercise of rights pursuant to Paragraph 1 can be done through an agent such as the legal representative of the information subject or a person who has been delegated. In this case, you must submit a power of attorney in accordance with the form of Attachment 11 of the Enforcement Regulations of the Personal Information Protection Act.

⑤ The information subject must not infringe on the personal information and privacy of the information subject or others handled by DiveB&B by violating related laws such as the Personal Information Protection Act.

Article 4. Personal information items to be processed

DiveBNB Co., Ltd. handles the following personal information items.

1. Homepage member registration and management

․Required items: name, date of birth, ID, password, address, phone number, gender, e-mail address, IPIN number

․Optional items: marital status, field of interest

2. Provision of goods or services

․Required items: payment information such as name, date of birth, ID, password, address, phone number, email address, IPIN number, credit card number, bank account information, etc.

․Optional items: field of interest, past purchase history

3. In the process of using the Internet service, the following personal information items may be automatically generated and collected.

․IP address, cookie, MAC address, service use record, visit record, bad use record, etc.

Article 5. Destruction of personal information

① When the personal information becomes unnecessary, such as the elapse of the personal information retention period or the achievement of the processing purpose, DiveB&B will destroy the personal information without delay.

② If the personal information retention period agreed by the information subject has elapsed or the purpose of processing has been achieved, if personal information must be kept in accordance with other laws and regulations, the personal information may be transferred to a separate database (DB) or the storage location Preserved otherwise.

③ The procedure and method of destroying personal information are as follows.

1. Destruction procedure

DiveB&B Co., Ltd. selects the personal information for which the reason for destruction occurred, and destroys the personal information with the approval of the personal information protection manager of DiveB&B Co., Ltd.

2. Destruction method

DiveB&B Co., Ltd. destroys personal information recorded and stored in the form of electronic files using a method such as Low Level Format so that the records cannot be reproduced, and recorded and stored in paper documents.

        Personal information is destroyed by shredding or incineration.

Article 6. Measures to ensure the safety of personal information

DiveB&B is taking the following measures to ensure the safety of personal information.

1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.

2. Technical measures: management of access rights such as personal information processing system, installation of access control system, encryption of unique identification information, installation of security programs

3. Physical measures: Access control of computer room, data storage room, etc.

Article 7. Matters concerning the installation, operation and rejection of automatic personal information collection devices

① The company uses ‘cookies’ that store and retrieve usage information from time to time in order to provide personalized services to users.

② Cookies are a small amount of information sent by the server (http) used to operate the website to the user's computer browser, and may be stored on the hard disk in the user's PC computer.

end. Purpose of use of cookies: It is used to provide optimized information to users by identifying the types of visits and usage, popular search terms, secure access, etc. for each service and website visited by the user.

I. Installation, operation, and rejection of cookies: You can refuse to store cookies by setting options in the Tools> Internet Options> Personal Information menu at the top of the web browser.

All. If you refuse to store cookies, you may experience difficulties in using customized services.

Article 8. Personal Information Protection Officer

① DiveB&B Co., Ltd. is in charge of the handling of personal information and appoints the person in charge of personal information protection as follows for the handling of complaints and damage relief of the information subject related to the processing of personal information.

▶ Personal Information Protection Officer

Name: Soonjin Lee

Position: Representative Director

Contact: 1670-3868: 1670-3868, jiny@divebnb.net

※ It is connected to the department in charge of personal information protection.

▶ Department in charge of personal information protection

Department Name: IT Team

Person in charge: Jaeheon Jung

Contact: 1670-3868: 1670-3868, it@divebnb.net

② The information subject may contact the person in charge of personal information protection and the department in charge of all personal information protection related inquiries, complaint handling, damage relief, etc. that occurred while using DiveB&B's service (or business). DiveB&B Co., Ltd. will respond and handle inquiries from the information subject without delay.

Article 9. Request to view personal information

The information subject may request the access to personal information pursuant to Article 35 of the Personal Information Protection Act to the following departments. Dive B&B Co., Ltd. will endeavor to expedite the request for access to personal information of the information subject.

▶ Personal information request reception and processing department

Department Name: IT Team

Person in charge: Jaeheon Jung

Contact: 1670-3868: 1670-3868, it@divebnb.net

Article 10. Remedy for infringement of rights and interests

The information subject may contact the following organizations for damage relief, consultation, etc. for personal information infringement.

<The following organizations are separate from DiveB&B Co., Ltd. If you are not satisfied with Dive B&B's own personal information complaint handling and damage relief results, or if you need more detailed help, please contact us.>

▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)

-Responsibility: Report of personal information infringement, request for consultation

-Homepage: privacy.kisa.or.kr

-Phone: (without area code) 118

-Address: (58324) Personal Information Infringement Report Center on the 3rd floor, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2 Bitgaram-dong)

▶ Personal Information Dispute Mediation Committee

-Jurisdiction: Personal information dispute mediation application, collective dispute mediation (civil settlement)

-Homepage: www.kopico.go.kr

-Phone: (without area code) 1833-6972

-Address: (03171) 4th floor of Seoul Government Complex, 209 Sejong-daero, Jongno-gu, Seoul

▶ Supreme Prosecutors' Office Cyber ​​Crime Investigation Division: 02-3480-3573 (www.spo.go.kr)

▶ National Police Agency Cyber ​​Security Bureau: 182 (http://cyberbureau.police.go.kr)

Article 11. How to collect personal information

① In the process of signing up for membership and using the service, if the user agrees to the collection of personal information and enters the information directly, the personal information is collected.

② In the course of consultation through the customer center, personal information of users may be collected through web pages, e-mails, faxes, and telephones.

③ Personal information may be collected in writing at offline events, etc.

④ Personal information may be provided from external companies or organizations affiliated with the company, and in this case, the affiliate must obtain consent from the user to provide personal information.

⑤ Members under the age of 14 can use the service only after obtaining consent from their legal representative.

2020.07.17.