Privacy Policy

Article 1 (Purposes of Processing)

The Hotel processes personal data for the purposes below and does not use it for any other purpose. Where the purpose of use changes, the Hotel will take the necessary measures, including obtaining separate consent under Article 18 of the Personal Information Protection Act.

• Accepting and fulfilling accommodation reservations — verifying requests, checking availability, notifying confirmation or refusal, managing stays, processing check-in and check-out
• Payment and settlement — collecting payment, processing cancellations and refunds, issuing tax invoices and cash receipts
• Responding to enquiries — reviewing and replying to enquiries and requests, handling complaints, retaining records for dispute resolution
• Service improvement — analysing access frequency and usage patterns to improve the Website (statistical purposes, in a form that does not identify individuals)

Article 2 (Categories of Personal Data Collected and Methods of Collection)

① The Hotel collects the following categories of personal data.

② The Hotel collects personal data through the reservation and enquiry forms on the Website and through telephone enquiries.

③ The Hotel does not itself collect or store card numbers, expiry dates, passwords or other card payment credentials. Such data is collected and processed directly by the payment gateway.

④ The Hotel does not collect sensitive data under Article 23 of the Personal Information Protection Act, such as information on ideology, belief, health or sex life.

Article 3 (Processing and Retention Periods)

① The Hotel processes and retains personal data within the retention and use period prescribed by law or consented to by the data subject.

② Retention periods for each category are as follows.

③ Personal data whose retention period has expired is destroyed without delay.

Article 4 (Provision to Third Parties)

① The Hotel processes personal data only within the scope set out in Article 1, and provides it to third parties only where Articles 17 and 18 of the Personal Information Protection Act apply, such as with the consent of the data subject or under a specific provision of law.

② The Hotel does not currently provide personal data to any third party. Should such provision become necessary, the Hotel will give prior notice of the recipient, the purpose, the categories of data and the retention period, and will obtain consent.

Article 5 (Outsourcing of Processing)

① The Hotel outsources the processing of personal data as follows in order to provide its services.

② When entering into an outsourcing contract, the Hotel specifies in the contract, in accordance with Article 26 of the Personal Information Protection Act, the prohibition on processing personal data for purposes other than performing the outsourced work, technical and administrative safeguards, restrictions on sub-processing, supervision of the processor, and liability including damages, and supervises whether the processor handles personal data securely.

③ Where the outsourced work or the processor changes, the Hotel will disclose the change through this Policy without delay.

Article 6 (Transfer of Personal Data Abroad)

① The Hotel’s web servers are located within the Republic of Korea, and reservation and enquiry data is not transferred abroad.

② However, certain data is transferred abroad for the purpose of analysing use of the Website, as follows.

③ Data subjects may refuse this transfer by blocking cookies in their browser settings or by installing the Google Analytics Opt-out Browser Add-on.

Article 7 (Rights of Data Subjects and How to Exercise Them)

① Data subjects may at any time request access to, correction or deletion of, or suspension of the processing of their personal data.

② These rights may be exercised by telephone, email or in writing, and the Hotel will act on such requests without delay.

③ Where a data subject requests correction of an error in personal data, the Hotel will not use or provide that data until the correction is complete.

④ Rights may also be exercised through a legal representative or a duly authorised agent, who must submit a letter of authority.

⑤ Requests for deletion may be restricted in respect of data that must be retained under applicable law.

Article 8 (Destruction of Personal Data)

① Where the retention period expires or the purpose of processing is achieved, the Hotel destroys the personal data concerned without delay, and within 5 days of the date the ground arises.

② Data is destroyed as follows.

• Data in electronic files — permanently deleted by a method that prevents recovery or reproduction
• Data recorded on paper — shredded or incinerated

③ Where data must continue to be retained under other legislation after the retention period has expired, it is stored in a separate database.

Article 9 (Measures to Secure Personal Data)

The Hotel takes the following measures to secure personal data.

• Administrative measures — minimising the number of staff handling personal data, establishing and implementing an internal management plan
• Technical measures — managing access rights to the personal data processing system, retaining access logs, applying HTTPS encryption across the site, storing passwords with one-way encryption, installing and updating security software
• Physical measures — access control over the systems on which personal data is stored

Article 10 (Cookies and Other Automatic Collection Tools)

① The Hotel uses cookies to provide individualised services and to analyse usage statistics.

② A cookie is a small piece of information sent by a website to the user’s browser and stored on the user’s device.

③ Users may allow or refuse the storage of cookies through their browser settings. Refusing cookies may limit the use of certain services.

Article 11 (Chief Privacy Officer)

① The Hotel has designated a Chief Privacy Officer, as set out below, to take overall responsibility for the processing of personal data and to handle complaints and remedies for data subjects.

② Data subjects may direct any enquiry, complaint or request for remedy relating to personal data protection arising from use of the Hotel’s services to the Chief Privacy Officer, and the Hotel will respond and act without delay.

Article 12 (Remedies for Infringement of Rights)

Data subjects may apply to the following bodies for dispute resolution or consultation in order to obtain a remedy for infringement of their personal data.

In addition, a person whose rights or interests are infringed by a disposition or omission of the head of a public institution in response to a request under Articles 35, 36 or 37 of the Personal Information Protection Act may file an administrative appeal under the Administrative Appeals Act.

Article 13 (Changes to this Privacy Policy)

① This Privacy Policy takes effect on 27 August 2026.

② Where content is added, deleted or amended in response to changes in law, policy or security technology, the Hotel will give notice on the Website at least 7 days before the change takes effect.