Privacy Policy | THE PLAZA HOTEL SEOUL

The Company collects and uses the following items of personal information. Information collected may differ according to type of guest. When relevant laws mandate the retention of personal information, the Company will retain the information stipulated in said law(s) for the prescribed period of time.

1) Personal Information collected and used with the consent of the data subject

수집·이용하는 개인정보를 나타낸 표
Category		Information collected and used	Purpose	Period of retention and use	Legal Basis
Room guests	Mandatory	Name, telephone number, email address, signature	Provision of service	5 years after check-out	Personal Information Protection Act, Article 15, Paragraph 1, Item 1 (Consent of the Data Subject)
Room guests	Optional	Date of birth, postal address, gender, nationality, payment information, passport number	Delivery of notices, provision of anniversary services, money-changing service	5 years after check-out	Personal Information Protection Act, Article 15, Paragraph 1, Item 1 (Consent of the Data Subject) Personal Information Protection Act, Article 15, Paragraph 1, Item 2 (Compliance with Legal Obligation) Personal Information Protection Act, Article 24, Paragraph 1, Item 2 (Processing of Personally Identifiable Information) Foreign Exchange Transactions Act, Article 20 (Reporting and Inspections) Foreign Exchange Transactions Act, Article 2-29 (Obligations of Money Changers)
Fitness Club members	Mandatory	Name, date of birth, telephone number, postal address	Gaining membership	Until membership cancellation	Personal Information Protection Act, Article 15, Paragraph 1, Item 1 (Consent of the Data Subject)
Fitness Club members	Optional	Hobbies, place of work	Customer management	Until membership cancellation
Inquiry	Mandatory	Name, Email, mobile phone number	To provide information and services regarding inquiry	3 months from date of the signing of this agreement
Feedback	Mandatory	Name, Email, mobile phone number, password	To provide information and services regarding inquiry	3 years from date of the signing of this agreement

2) Personal information collected automatically
When applying for membership or verifying your identity on-line (through systems such as I-PIN or mobile phone ID verification), information such as gender, date of birth, service usage records, access logs, cookies, IP information and usage time records may be collected automatically. This can be prevented if users change their personal browser settings to forbid the use of cookies. (To access cookie settings, go to tools in your web browser > Internet options > Personal information > Advanced > Cookie authorization)
※ Cookies are small amounts of information sent by websites to a user's browser. They identify specific computers but not specific users.

The Company deletes personal information without delay once the purpose for which it is used has been achieved. However, in cases where related laws in internal policies necessitate the retention of personal information for the following purposes, such as verifying relationships of obligation vis-a-vis rights of commerce, such information will be retained for the minimum legally stipulated time.
⑴Consumer protection laws regarding electronic commerce
－Records of withdrawal from contracts of agreements: 5 years
－Records of payments and supply of goods: 5 years
－Records of consumer complaints or dispute settlement: 3 years
⑵Protection of Communications Secrets Act
－Records of website visits: 3 months
⑶Commercial law
－Statements or similar documents: 5 years

After the purpose for which personal information was collected and used has been achieved, this information is deleted without delay, according to retention and use periods. Deletion methods are as follows.
⑴ Personal information printed on paper: Shredded using a shredder
⑵ Personal information stored in the form of electronic files: Permanently deleted using technology that prevents data recovery
⑶ Information stored on a storage device such as HDD or USB: Completely physically destroyed

In principle, the Company hands personal information within the bounds of the purposes for which it is collected and used, and does not exceed these bounds or pass on information to third parties. However, personal information may be handled outside these bounds in the following exception circumstances.
⑴With the advance permission of the owner of the information
⑵When specific legal requirements make this inevitable
⑶When the owner of the information or her/his legally designated proxy is unable to express her/his opinion, or when advance permission cannot be obtained for reasons such as unknown postal address and it is deemed that measures must be taken in order to protect the life, physical wellbeing or assets of the owner of the information or a third party
The Company shares personal information with the following parties, for purposes such as providing better service and customer convenience. However, advance permission is obtained from customers before their personal information is shared with these parties.

개인정보의 제3자 제공에 관한 사항을 나타낸 표
Recipient of information	Purpose of provision	Information provided	Period of retention and use
Hanwha General Insurance	Filing insurance claims in case of accident	Name, gender, age, telephone number, bank and account number (and scan of bank account book in cases where payments are made directly by insurance company)	When agreement is withdrawn or purpose of information collection has been achieved

In order to improve efficiency and provide optimized service, we outsource the handling of personal information to the following professional subcontractors.

개인정보처리의 위탁에 관한 사항을 나타낸 표
Subcontractor	Work outsourced	Period of retention and use
Hanwha Systems (Re-commission: XT)	Management of computing systems (Re-commission: Management of website)	Until the termination of the outsourcing agreement
Hanwha 63 City	Management of building access and CCTV
Korea Information	Credit card payment services
Colossum Corp., atoArt, GOEUN Flower, Boeun Flower, Sangmi Hwaweon, Shillan Farm, Yesgo Flower, Jeil Flower, Truebowl, Taeyang Hwawon, Flower Bank, Headquick Cargo, The Good Day	Deliveries
Inforsecure	POS, customer management system, maintenance

The company collects and uses behavioral information in order to provide optimized and customized services and benefits to customers based on behavioral information such as website visit records.

행태정보 수집∙이용에 관한 사항을 나태낸 표
Category	Information
Behavioral information items collected	Automatically generated information such as the user's website visit history, log records, product selection information, and internal search information
Method of collecting behavioral information	Automatic collection through membership registration and login on the web
Purpose of collecting behavioral information	To analyze the website visitors to evaluate users' tastes and areas of interest and use them for target marketing and possible product planning.
Retention and use period of behavioral information and method of subsequent information processing	Log records such as web site visit history, search history, etc. : When service is terminated * Immediately destroyed upon expiration of the retention and use period.
How to Exercise Your Privacy Rights	1. Web Browser : Manage Cookies 2. Smartphone (Mobile App) 1) Android: Settings → Privacy → Ads → Reset or Delete Advertising ID 2) iOS: Settings → Privacy → Tracking → Turn off “Allow Apps to Request to Track”
How to Allow / Block Cookies	1. Web Browser - Google Chrome : Click the “three dots” (⋮) in the top-right corner → Open New Incognito Window (Shortcut: Ctrl+Shift+N) - Microsoft Edge : Click the “three dots” (…) in the top-right corner → Open InPrivate Window (Shortcut: Ctrl+Shift+N) 2. Mobile Browser - Google Chrome : Click the “three dots” (⋮) in the top right corner → Open New Incognito Tab - Safari (macOS) : Device Settings → Safari → Advanced → Block All Cookies - Samsung Internet : Click the “Tabs” icon at the bottom of the mobile browser → Turn on Secret Mode → Start
The Current Status of Entrustment for Behavioral Data	1. Entrusted Company : Google 2. Details of Entrusted Work : Analysis of service statistical data 3. Analysis Tool : Google Analytics
Method of user damage relief	* Relevant department: The Plaza Marketing Team * E-mail: qna.others@hanwha.com

The Company does not collect any personal information of children under the age of 14.

Customers may view or correct their own personal information as held on records, at any time. This can be done directly on-line by clicking on “Change personal information” and “Amend member information” and confirming identity, or by a member of Company staff if requested by telephone. However, the Company may request that the customer fill out a personal information request form at such times.

⑴Requesting access to personal information: A customers may request access to any of her/his personal information that is processed by the Company.
The Company will allow the customer to access the personal information within 10 days of the customer's request. If there is a legitimate reason for this request to be denied, the customer may be notified of the reason and its viewing by the customer can be postponed; if this reason become no longer valid, the information will be made available to the customer without delay. The Company may notify the customer of the cause and restrict or deny access to information on either of the following grounds.
① When the law prohibits or restricts viewing
② If there is a risk of harming the life or physical wellbeing of another person or a possibility of unjustly infringing upon the property and other interests of another person.
⑵Requesting correction and deletion of personal information: A customer may request the correction or deletion of personal information processed by the Company. However, if any law mandates the collection of this personal information, requests for its deletion cannot be accepted. When a customer requests correction or deletion of personal information, the Company shall take necessary measures without delay and notify the customer of the outcome, except when relevant laws stipulate a particular procedure. If necessary, the Company may require the customer to submit evidence required to confirm the necessity of correction or deletion. If a customer requests the correction of an error in personal information, it will not be used or externally released until the correction is complete. Moreover, if a customer's personal information has already been provided to a third party, we will notify said third party without delay of correction or deletion that has taken place. When the Company deletes personal information, appropriate measures are taken to prevent the related data from being recovered.
⑶Requesting the suspension of personal information handling: A customer may request that the Company no longer handle her/his data.
The Company shall suspend, partially or entirely, the handling of personal information immediately if the customer requests such action. However, the customer's request may be refused in the following circumstances. ① If compliance with statutory obligations prevents the suspension of personal information handling
② If not handling the personal information obstructs fulfillment of the contract with the owner of the information, or if the customer has not clearly stated her/his intention to terminate the contract.
③ When there is a risk of harming the life or physical wellbeing of another person, or a possibility of unjustly violating the property rights or other interests of another person. The Company takes necessary measures such as the deletion of the personal information without delay in cases where personal information handling has been suspended in response to the request of the customer.
⑷Requesting the viewing, correction, deletion, or suspended handling of personal information: If a customer wishes to request to view, correct, delete or suspend personal information, he/she must fill in a Personal Information Request Form and submit it to the individual responsible for data protection person, by email or facsimile.

The Company takes the following technical, administrative and physical measures to ensure the safety of customers in order to prevent personal information from being lost, stolen, leaked, altered or damaged. ⑴Devising and implementing of internal plans for safe processing of personal information
⑵Controlling access to personal information and restricting access rights
⑶Applying encryption technology, or taking equivalent measures, for the secure storage and transmission of personal information
⑷Taking measures to prevent the storage of access logs, in order to prevent violation of personal information or tampering
⑸Installing and regularly updating of personal information security programs
⑹Taking measures to provide physical protection, including the building of facilities for secure storage of personal information and installation of locking devices

In order to promote clear communication with customers, the Company operates a personal information advice point. If you have an inquiry, please contact us at the number below. We will endeavor to respond as soon as possible.

의견수렴 및 불만 처리 연락처를 나타낸 표
Category	THE PLAZA
Main telephone number	82.2.771.2200
VOC	www.hoteltheplaza.com

Customers requiring advice regarding other violations of personal information, you may contact the Korea National Internet Development Agency's Personal Information Violation Notification Center or the National Police Agency's Cyber Terrorism Response Center.

의견수렴 및 불만 처리 연락처를 나타낸 표
Body	Personal Information Violation Notification Center	Cyber Terrorism Response Center
Telephone number	1833-6972	182
URL	https://www.kopico.go.kr	https://ecrm.police.go.kr

In order to protect the personal information of customers and to handle complaints related to personal information, the Company places the following individuals in charge of personal information.

개인정보보호 책임자에 관한 사항을 나타낸 표
Category	Individual in charge of personal information	Personal information protection manager	Person responsible for personal information protection
Position/department	Office of Information Security	Office of Information Security	Office of Information Security
Name	Changjoong Kim	Youngsoo Kim	Jihyun Park
Email address	hnrresortcpo@hanwha.com	hnrresortcpo@hanwha.com	hnrresortcpo@hanwha.com

This privacy policy was amended on July 23, 2026. When and if further changes (amendments, additions or deletions) are made in accordance with related laws or changes in hotel policy, these will be announced on website news pages or in pop-up windows. Date of announcement: July 16, 2026
Date of implementation: July 23, 2026