Paradise Sega Sammy Co., Ltd. (hereinafter “Paradise City” or “we”) values the personal information of customers or service users (hereinafter “information subjects”) and is always doing its best to protect the personal information of information subjects. Accordingly, we comply with the Personal Information Protection Act and other relevant laws and regulations to protect the rights of information subjects.

Labeling of Key Personal Information Processing
Collection of General Personal Information Collection of General Personal Information The general personal information collected includes name, email address, and mobile phone number. ※ For more details, please refer to the full Privacy Policy.	Period of Retaining Personal Information Period of Retaining Personal Information Personal information is retained until membership withdrawal. (However, if retention is required by other applicable laws, the respective retention period shall apply.) ※ For more details, please refer to the full Privacy Policy.	Entrustment of Personal Information Processing Entrustment of Personal Information Processing For better service, part of the personal information processing is entrusted to Paradise Co., Ltd., Paradise Tour Co., Ltd., and Korea Information & Communications Co., Ltd. ※ For more details, please refer to the full Privacy Policy.
Purpose of Personal Information Processing Purpose of Personal Information Processing Personal information is used for identification, service and information provision, complaint handling, and customer inquiry response. ※ For more details, please refer to the full Privacy Policy.	Destruction of Personal Information Destruction of Personal Information When personal information is no longer needed, such as after the retention period has expired or the processing purpose has been fulfilled, it will be promptly destroyed. ※ For more details, please refer to the full Privacy Policy.	Complaint Handling Department Complaint Handling Department For inquiries related to personal information, please contact the responsible department: Department: Information Security Team Contact: +82-32-729-3308 email : privacy@paradian.com ※ For more details, please refer to the full Privacy Policy.

※ ※ You can check the details by placing the mouse cursor over the symbol. For more information, please check the Privacy Policy below.

Table of Contents

• ① In accordance with the Personal Information Protection Act, Paradise City processes personal information with the information subject’s consent as follows to the minimum extent necessary to provide services.

  [Online Service]

  Category		Information collected	Purpose of information collection	Retention period
  Sign-up (Paradise City Rewards)	Required	ID, password, name (Korean), gender, date of birth, mobile phone number, email	Verification of identity, provision of service and information, handling of complaints, response to customer inquiries	Until membership withdrawal
  	Optional	Name (English), address, occupation, wedding anniversary, facilities of interest, areas of interest	Provision of customized services for members
  Room reservations	Required	Name, date of birth, mobile phone number, email, payment information	Verification of identity, provision of service and information, handling of complaints, response to customer inquiries	5 years
  	Optional	Gender	Provision of customized services
  Online reservation/order (E-SHOP)	Required	Name, email, mobile phone number, payment information	Verification of identity, provision of service and information, handling of complaints, response to customer inquiries	5 years
  Food and beverage outlet reservations	Required	Name, email, mobile phone number, payment information	Verification of identity, provision of service and information, handling of complaints, response to customer inquiries	5 years
  CIMER, WONDERBOX reservations	Required	Name, date of birth, mobile phone number, email, payment information	Verification of identity, provision of service and information, handling of complaints, response to customer inquiries	5 years
  Guardian consent form for use of CIMER (for children 140cm or shorter)	Required	Child's name, date of use, locker number, guardian's name, guardian's contact information	For quick action in the event of a safety accident due to a child’s violation of safety rules	30 days after completion of use
  1:1 inquiries	Required	Name, email, mobile phone number	Verification of identity when receiving an inquiry/request and providing a response	3 years
  Sign-up for Signature membership	Required	Name, date of birth, shipping address, mobile phone number, payment information	Verification of identity, provision of service and information, handling of complaints, response to customer inquiries, delivery of physical membership cards	5 years
  Give Signature membership as a gift	Required	Gift recipient customer's name, gift recipient customer's mobile phone number, payment information	Sending of Paradise Signature membership gifts	5 years
  Mobile pre-check-in	Required	Name, date of birth, email, mobile phone number, length of stay	Verification of identity, pre-check-in	5 years
  	Optional	Vehicle number, actual guest’s name, actual guest’s mobile phone number	Pre-check-in service, parking registration
  Room registration card	Required	Name, address, date of birth, email, mobile phone number, length of stay, passport number (for foreigners), nationality (for foreigners)	Verification of identity, confirmation of reservation, delivery of notices, handling of complaints	5 years
  	Optional	Gender, company name	Provision of customized services

  [Offline Service]

  Category		Information collected	Purpose of information collection	Retention period
  Sign up for Signature membership	Required	Name, date of birth, shipping address, mobile phone number, payment information	Verification of identity, provision of service and information, handling of complaints, response to customer inquiries	5 years
  Room Registration Card	Required	Name, address, date of birth, email, mobile phone number, length of stay, passport number (for foreigners), nationality (for foreigners)	Verification of identity, confirmation of reservation, delivery of notices, handling of complaints	5 years
  	Optional	Gender, company name	Provision of customized services
  Credit card payment consent	Optional	Name, length of stay, mobile phone number, email, payment information	Payment of room service fee	3 months after check-out
  Banquet agreement	Required	Name, address, mobile phone number	Banquet consultation, reservation and contract	3 years
  Use of infirmary	Required	Name, age, gender, mobile phone number	Post-care for use of infirmary, VOC response	6 months from date of use
  Stroller storage	Optional	Name, contact information	Storage of strollers for customers using WONDERBOX	Immediately destroyed after purpose of information collection is achieved

  [Mobile App]

  Category		Information collected	Purpose of information collection	Retention period
  Sign up (Paradise City Rewards)	Required	ID, password, name (Korean), gender, date of birth, mobile phone number, email	Verification of identity, provision of service and information, handling of complaints, response to customer inquiries	Until membership withdrawal
  	Optional	Name (English), address, occupation, wedding anniversary, facilities of interest, areas of interest	Provision of customized services for members
  Room reservations	Required	Name, date of birth, email, mobile phone number, payment information	Verification of identity, provision of service and information, handling of complaints, response to customer inquiries	5 years
  	Optional	Gender	Provision of customized services
  Food and beverage outlet reservations	Required	Name, email, mobile phone number, payment information	Verification of identity, provision of service and information, handling of complaints, response to customer inquiries	5 years
  CIMER, WONDERBOX reservations	Required	Name, date of birth, email, mobile phone number, payment information	Verification of identity, provision of service and information, handling of complaints, response to customer inquiries	5 years
  1:1 inquiries	Required	Name, email, mobile phone number	When receiving an inquiry/request, verify identity and provide a response	3 years

• ② Paradise City retains personal information in accordance with relevant laws and regulations as follows.

  Relevant statutes	Information retained	Retention period
  Act on Consumer Protection in Electronic Commerce	Records on contracts, offer withdrawal, etc.	5 years
  	Records on payment for and supply of goods, etc.	5 years
  	Records on resolution of consumer complaints or dispute	3 years
  Framework Act on National Taxes	Accounts and supporting documents for all transactions stipulated by tax laws.	5 years
  Protection of Communications Secrets Act	Service visit records	3 months
  Commercial Act	Slips or similar documents	5 years
  Credit Information Act	Records on collection/processing/use of personal credit information	3 years
  Act on Reporting and Using Specified Financial Transaction Information	Customer due diligence data	5 years from the last transaction date

• ① In principle, Paradise City does not process personal information of children under the age of 14.
• ② In exceptional cases where personal information of a child under the age of 14 has to be processed, we obtain consent from the child's legal representative.

• ① Paradise City only processes the information subject’s personal information to the extent specified in the “Purpose of personal information processing.” Paradise City only provides the information subject’s personal information to third parties in cases falling under Articles 17 and 18 of the Personal Information Protection Act (e.g., consent of information subject, special provisions of law, etc.), and does not provide it to third parties in any other cases.
• ② In order to provide smooth services, Paradise City obtains the information subject’s consent in accordance with Article 17, Paragraph 1 of the Personal Information Protection Act as follows and only provides personal information to the minimum extent necessary. The information subject has the right to refuse to give consent, and there are no disadvantages resulting from such refusal.

  Recipient	Purpose of provision	Items provided	Recipient’s retention and usage periods
  Paradise Hotel Busan Co., Ltd.	Sharing Rewards points	Name, ID, mobile phone number, email, Rewards points	Until withdrawal of Rewards membership

• ③ In accordance with each subparagraph of Article 18, Paragraph 2 of the Personal Information Protection Act, Paradise City may provide personal information without the information subject’s consent in the following cases:
  •   -  When there are special provisions in the law or compliance with legal obligations makes it inevitable
  •   -  When it is necessary to perform a contract entered into with the information subject or to take measures at the request of the information subject during the process of entering into a contract with the information subject
  •   -  When it is clearly deemed necessary for urgent interests regarding life, body, or property of the information subject or a third party
  •   -  When it is necessary to achieve the personal information processor’s legitimate interests and when it clearly takes precedence over the information subject’s rights (In this case, it must be significantly related to the personal information processor’s legitimate interests and must not exceed a reasonable degree.)
  •   -  When it is urgently necessary for public safety and well-being such as public health, etc.

• ① When Paradise City entrusts personal information processing in order to provide services, it discloses the matter so that the information subject can easily check the same at any time. When entrusting the promotion of goods or services or solicitation of sales thereof, it provides additional information to the information subject in writing or through other methods.
• ② In order to smoothly process personal information work, Paradise City entrusts personal information processing work as follows in accordance with Article 28 of the Personal Information Protection Act.

  Entrustee (Contractor)	Entrusted work
  Paradise Co., Ltd. (Sub-contractors: SK C&C Co., Ltd., SK shieldus Co., Ltd.)	Operation of IT and security service
  MR.DEVELLO Co., Ltd.	Operation of backbone API system
  the creation of value Co., Ltd.	Development, operation and promotion of homepage; operation of Oracle Eloqua
  Korea Information and Communication Co., Ltd.	Operation of domestic payment service
  Eximbay Co., Ltd.	Operation of overseas payment service
  Paradise Tour Co., Ltd.	Operation of membership service
  dk techin Co., Ltd. (Sub-contractors: Kakao, Gemtech, KP Mobile, KT, LGU+)	Provision of outbound notification talk service
  SureM Co., Ltd.	Provision of outbound text message service
  humusOn Co., Ltd.	Provision of outbound email service
  Samkoo, Inc.	Operation of room delivery, parking management system
  the man Co., Ltd.	Operation of VIP member valet service
  G1SOFT Co., Ltd.	Development and maintenance of business system
  i2l Co., Ltd.	Development of mobile APP feature

• ③ When entering into an entrustment contract with a contractor, Paradise City states, in the contract or other documents in accordance with Article 26 of the Personal Information Protection Act, the prohibition of personal information processing for purposes other than the entrusted work, technical and administrative protection measures, restrictions on sub-contracting, management, and supervision of the entrustee (contractor), liability for damages, etc., and supervises whether the entrustee (contractor) safely processes personal information.
• ④ Paradise City obtains the information subject’s separate consent in the event the entrustee (contractor) sub-contracts the company's personal information processing in accordance with Article 26, Paragraph 6 of the Personal Information Protection Act. In the event that the entrusted work or the entrustee (contractor) changes, we will disclose this change without delay in this Privacy Policy.

• ① In order to smoothly process personal information, Paradise City entrusts personal information processing overseas as follows in accordance with Article 28-8, Paragraph 1 of the Personal Information Protection Act.

  Recipient of Personal Information	Destination country	When and how transferred	Personal information items transferred	Purpose of use	Period of retention/use
  Oracle Corporation (080-2194-114)	U.S.	Transferred to Oracle Cloud Computing environment via information and communications network, upon membership registration	Name, email, mobile phone number, date of birth, wedding anniversary, gender, age, nationality, area of residence	Sending marketing information, storing data, and managing Eloqua solutions	Until membership withdrawal

• ① When any personal information becomes unnecessary (e.g., expiration of personal information retention period, achievement of processing purpose, etc.), Paradise City destroys the personal information without delay.
• ② When the retention period of personal information consented to by the information subject expires or the purpose of its processing is achieved, but the personal information must be retained in accordance with other laws, the relevant personal information is retained either by moving it to a separate database (DB) or by changing the storage location. * The items of personal information retained in accordance with other laws and the grounds for retention can be checked in “1. Purpose of collecting personal information, information items collected, and retention period” ” above.
• ③ Personal information recorded and stored in electronic file format is destroyed so that the record cannot be restored or reproduced. Personal information recorded and stored in printed materials, documents, etc. is destroyed by shredding or incineration.

• ① The information subject may exercise at any time the right to request access to, correction, deletion, suspension of processing, and withdrawal of consent, regarding their personal information. *The rights of children under the age of 14 regarding personal information shall directly be exercised by the child’s legal representative. Information subjects who are minors over the age of 14 may exercise their rights regarding their personal information directly or through their legal representatives.
• ② If you contact the Personal Information Protection Department in writing or by email to exercise your rights, we will take action without delay. However, if there is a justifiable reason, the information subject’s rights may be restricted, and Paradise City will notify the information subject of the reason for the restriction without delay.
• ③ The information subject may access, correct, delete, suspend processing, and withdraw consent regarding personal information at any time through “My Page > Modify Member Information” on the website.
• ④ When the information subject makes the request by visiting Paradise City or by phone (main number: 1833-8855), we will promptly process the request after verifying the information subject’s identity.

• ① Minimization regarding personal information handlers: We minimize the authority of personal information handlers to protect personal information.
• ② Regular training for personal information handlers: We conduct regular training to raise awareness of personal information protection.
• ③ Regular internal inspections: We conduct regular self-inspections to ensure the safety of personal information processing.
• ④ Establishment and implementation of an internal management plan: We have established an internal management plan to safely process and manage personal information and implement the same.
• ⑤ Encryption of personal information: The personal information and password of the information subject are encrypted and then stored/managed, and are safely managed by using separate security features, even during transmission.
• ⑥ Technical measures against hacking, etc.: In order to prevent personal information leakage and damage due to hacking or computer viruses, we install security programs and conduct periodic updates/inspections, have installed the system in an area with controlled access from the outside, and monitor and block access to it by using both technical and physical measures.
• ⑦ Restricting access to personal information: We take necessary measures to control access to the personal information processing system and control unauthorized access from the outside using an intrusion prevention system.
• ⑧ Storage of access records and prevention of forgery and falsification: We store and manage access records of the personal information processing system and have implemented security features to prevent forgery, falsification, theft, and loss of access records.
• ⑨ Use of locking devices for document security: Documents, auxiliary storage media, etc. that contain personal information are stored in a safe place with a locking device.
• ⑩ Control of unauthorized access: We have a separate physical storage location where personal information is stored, and we establish and operate access control procedures for such storage.

• ① Purpose of using cookies, etc.
  •   -  We provide optimized information to users by identifying the visit and usage patterns, use of secure access, etc. for each service and website visited by the user.
  •   -  Paradise City uses Google Analytics, a web analysis service provided by Google, Inc. (hereinafter “Google”) for the purpose of providing better services, and to process relevant information for the purpose of evaluating the website usage status of members and non-members, analyze visitor behavior, provide reports for service improvement, etc.
  •   -  The processing of information collected through Google Analytics is subject to the Google Privacy Policy and Google Analytics Terms of Service.
    • • Google Privacy Policy : https://www.google.com/intl/ko/policies/privacy/
    • • Google Analytics Terms of Service : https://www.google.com/analytics/terms/kr.html
• ② How to opt out of cookies: Users can opt out of automated cookie information collection as follows.
  • [Allow/Block Cookies in Web Browser]
  •   -  Chrome : Settings > Privacy and Security > Delete Browsing Data
  •   -  Edge : Settings > Cookies and Site Permissions > Manage and Remove Cookies and Site Data
  • [Allow/Block Cookies in Mobile Browser]
  •   -  Chrome : Settings > Privacy and Security > Delete Browsing Data
  •   -  Safari : Settings > Safari > Advanced > Block All Cookies
  •   -  Samsung Internet : Settings > Browsing Data > Clear Browsing Data
  • [Install Google Analytics Blocking Browser Add-on]
  •   -  https://tools.google.com/dlpage/gaoptout

• [Personal information protection officer]

•   -  Name: Executive Director Lim Jun-shin

• [Personal information protection department]

•   -  Name: Information Protection Team
•   -  Phone: 032-729-3308
•   -  Email: privacy@paradian.com

•   -  Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
•   -  Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
•   -  Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)
•   -  National Police Agency: (without area code) 182 (ecrm.police.go.kr)

• ① Purpose of processing and period of retaining personal location information

  Category	Purpose of information processing	Retention period
  Assist with pre-check-in	Assist with preparing registration card in advance	Immediately destroyed after purpose of use is achieved
  Provide event information	Provide information on facilities and coupons near the customer (hotel); location-based APP PUSH advertisement

• ② Ground for and period of retaining the confirmation data on collection, use, and provision of personal location information
  •   -  Paradise City automatically records and preserves the confirmation data on use and provision of location information in accordance with Article 16, Paragraph 2 of the Act on the Protection and Use of Location Information, and the relevant data is retained for 6 months.
• ③ Procedures and methods for destroying personal location information
  •   -  The procedures and methods for destroying personal location information are governed by “6. Destruction of personal information.”
• ④ Regarding provision of personal location information to third parties and on notification thereof
  •   -  Paradise City does not provide location information to third parties without the personal location information subject’s prior consent. Whenever personal location information is provided to a third party designated by the user, Paradise City immediately notifies the information subject of the recipient of information, date and time of provision, and purpose of provision.
• ⑤ Rights and obligations of guardians of children under the age of 8, etc. and how to exercise them
  •   -  If the guardian of a user falling under the following (hereinafter “child under the age of 8, etc.”) consents to the use or provision of the latter’s personal location information for the protection of the latter’s life or body, Paradise City regards it as the child’s own consent.
    • • Children under the age of 8
    • • Adults subject to guardianship
    • • Persons with mental disabilities under Article 2, Paragraph 2, Subparagraph 2 of the Act on Welfare of Persons with Disabilities who are severely disabled under Article 2, Paragraph 2 of the Act on Employment Promotion and Vocational Rehabilitation of Persons with Disabilities (limited to persons registered as disabled under Article 32 of the Act on Welfare of Persons with Disabilities)
  •   -  The guardian who intends to consent to the collection, use, or provision of personal location information of a child under the age of 8, etc. for the protection of the latter’s life or body shall submit to us a written consent form as attached by a document proving that they are the guardian.
  •   -  If the guardian consents to the use or provision of personal location information of a child under the age of 8, etc., the guardian may exercise all of the rights of the personal location information subject.
• ⑥ Regarding the personal location information protection officer
  •   -  The personal information protection officer and department specified in “10. Personal information protection officer and department” are responsible for the protection of personal location information.

• ① This Privacy Policy becomes effective on May 14, 2025.
• ② You can view previous versions of the Privacy Policy by selecting relevant dates at the top.