현재 페이지 위치 : > Privacy Policy
A. Shilla Hotel Co., Ltd. (hereinafter referred to as "The Company") places great importance on protecting customers' personal information and, in compliance with the Personal Information Protection Act and related laws, legally processes and safely manages personal information. Accordingly, pursuant to Article 30 of the Personal Information Protection Act (Establishment and Disclosure of Personal Information Processing Policy), the Company establishes and discloses the following Personal Information Processing Policy to inform customers of the purposes and methods for which their personal information is used and the measures taken to protect their personal information.
B. The Company has established procedures for revising the Personal Information Processing Policy, to continuously improve the Policy. When revising the Policy, the Company assigns a version number to ensure that customers can easily identify the revised information.
C. Personal information refers to information about a living individual that can be used to identify the individual, such as their name or resident registration number (including information that cannot be used to identify the individual on its own, but can be easily combined with other information to identify the individual).
Key Privacy Policy
※ Please refer to the Privacy Policy below for details.

List
※ Click on the items below to move to the corresponding area.












Article 1. Purpose of processing personal information, items collected, retention, and use period
A. The Company collects only the minimum amount of personal information necessary to provide services. When collecting personal information to provide services tailored to individual customer preferences and needs, separate consent is obtained.
B. The Company collects and uses personal information as follows:
① Personal information items collected without customer consent
| Classification | Items Collected/Used | Purpose of Collection/Use | Retention and Usage Period | Basis for Collection/Use | |
|---|---|---|---|---|---|
| Member Registration | Online | Name (Korean, English), gender, ID, password, date of birth, contact number, email address, and Shilla Rewards number | To identify members, provide Shilla Rewards services | Until membership withdrawal | Article 15 (1) 4 of the Personal Information Protection Act (Contract fulfilment) |
| Offline | Name (Korean, English), gender, date of birth, contact number, email address, and Shilla Rewards number | ||||
| Register an online account. | Name (English), password, email address, and Shilla Rewards number | ||||
| Shilla S Registration | Name (Korean,English), gender, date of birth, email address, contact number, credit card information, (card type, card number and expiration date), SHILLA S membership number, (when applying for a physical card) address | Membership application, member Identification, member management, contact for contract fulfillment, service information (notification delivery, personal preference confirmation, service-related guidance & consultation, complaint handling, important notes, etc.), annual fee payment, membership card delivery (when applying for a physical card) | One (1) year from membership expiration date | Article 15 (1) 4 of the Personal Information Protection Act (Contract Fulfilment) | |
| Reservations | Online | Name (Korean, English), gender, nationality, email address, contact number, length of stay and credit card information (card type, card number, and expiration date) | To process hotel reservations and serve guests. | One (1) year after acceptance of reservation request | Article 15 (1) 4 of the Personal Information Protection Act (Contract Fulfilment) |
| By phone | Name (Korean, English), gender, email address, contact number, reservation details (length of stay, room type, number of people, hotel name) and credit card information (card type, card number, and expiration date) | To process hotel reservations and serve guests. | Five (5) years after stay. (90 days in case of cancellation) | Article 15 (1) 4 of the Personal Information Protection Act (Contract Fulfilment) | |
| Dining Reservations | Name (Korean, English), gender, email address, contact number, reservation details, and credit card information (card type, card number, and expiration date) | To process dining reservations and serve guests. | One (1) year after acceptance of your reservation request | Article 15 (1) 4 of the Personal Information Protection Act (Contract Fulfilment) | |
| Inquires | Name (Korean, English), email address, contact number | Information and services regarding inquiries | For three (3) years from the day of collection or use agreeement | Article 15 (1) 4 of the Personal Information Protection Act (Contract Fulfilment) | |
| Currency Exchange (Foreign Exchange Transactions) | Name (Korean/English), nationality, unique identification information (passport number/resident registration number/alien registration number) | Currency exchange and foreign exchange transaction reporting | Five (5) years | 개Article 15 (1) 2 of the Personal Information Protection Act (Compliance with Legal Obligations), Article 24 (1) 2 (Processing in Accordance with Other Laws), Article 24-2, (1) 1 (Processing in Accordance with Other Laws and Presidential Decrees), Article 8 of the Foreign Exchange Transactions Act and Article 17 of the Enforcement Decree of the same Act, and Article 5-4 of the Specific Financial Information Act. | |
② ② Personal information items collected with customer consent
| Classification | Items Collected/Used | Purpose of Collection/Use | Retention and Usage Period | Basis for Collection/Use | |
|---|---|---|---|---|---|
| Marketing | Shilla Rewards | Name (Korean, English), gender, date of birth, email address, contact number, address, ID and Shilla Rewards number | To introduce members to Hotel Shilla's goods and services, including Shilla HM Co., Ltd. and other affiliated hotels' goods and services; information about customer appreciation and promotional events and customer satisfaction and market research surveys. | Until membership withdrawal or withdrawal of consent | Article 15 (1) 1 of the Personal Information Protection Act (Consent of the Data Subject) |
| Shilla S | Name (Korean, English), gender, date of birth, email address, contact number and SHILLA S membership number | To introduce products and services from the Company and other affiliates, providing notice of international chef invitation events, and providing customized customer service. | Until membership withdrawal or withdrawal of consent | Article 15 (1) 1 of the Personal Information Protection Act (Consent of the Data Subject) | |
| Dining Reservations | Food and beverage allergy information | To provide restaurant menus and services | One (1) year after acceptance of reservation request | Article 23 (1) 1 of the Personal Information Protection Act (Consent of the Data Subject to Sensitive Information) | |
③ Personal information items collected from people other than customers
| Classification | 수집 회사 | Items Collected/Used | Purpose of Collection/Use | Retention and Usage Period | Basis for Collection/Use |
|---|---|---|---|---|---|
| SNS Login Linkage Service | KaKao | SNS personal identification, name, email address, phone number | To provide services for simple login via social media | Until membership withdrawal | Article 15 (1) 4 of the Personal Information Protection Act (Contract Fulfilment) |
| Naver | SNS personal identification, name, email address, phone number | ||||
| Apple | SNS personal identification, email address | ||||
| SNS personal identification, name, email address | |||||
| Shilla Rewards Samsung Card | Samsung Card | Phone number, name (Korean), date of birth | To confirm Shilla Rewards membership for affiliate card issuance | After membership verification | Article 15 (1) 4 of the Personal Information Protection Act (Contract Fulfilment) |
| Phone number, name (Korean, English), date of birth, Shilla Rewards number, affiliate card issuance date | To provide affiliate services | Until withdrawal/cancellation of affiliate card (if not issued, immediately destroyed) | |||
| Shilla Rewards number, affiliate card cancellation date | To disclose membership cancellation/termination information for discontinuation of affiliate services | Upon withdrawal/cancellation of affiliate card |
④ Personal information items generated during the use of other services or business processes
- IP information, cookie Information, service usage records
Article 2. Procedures and Methods for Deleting Personal Information
A. When personal information becomes no longer necessary, such as cases after the retention period has expired or the processing purpose has been achieved, the Company will destroy the relevant personal information without delay.
B. If the Company must continue to retain personal information pursuant to other laws and regulations, even after the retention period has expired or the processing purpose has been achieved, the Company will safely store such personal information separately from other personal information.
| Classification | Basis | Retention Period | Item |
|---|---|---|---|
| Records of Contracts or Subscription Cancellations, etc. | Article 6, Paragraph 1, Subparagraph 2 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, etc. | Five (5) years | Identification, contractual or withdrawal information |
| Records of Payments and Supply of Goods, etc. | Article 6, Paragraph 1, Subparagraph 3 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, etc. | Five (5) years | 식Identification, contractual or withdrawal information |
| Records of Consumer Complaints or Dispute Resolution | Article 6, Paragraph 1, Subparagraph 4 of the Enforcement Decree of the Act on Consumer Protection in Electronic Commerce, etc. | Three (3) years | Identification, consumer dispute resolution information |
| Website Visit Records | Article 15-2, Paragraph 2 of the Protection of Communications Secrets Act | Three (3) months | Service access records (logs, IP addresses, etc.) |
| Information for Advance Payment of Taxes and Public Charges | Article 127, Paragraph 1 of the Income Tax Act | Five (5) years | Information related to income tax reporting |
The procedures and methods for destroying personal information are as follows:
- The Company determines the personal information for which destruction is necessary and establishes a destruction plan to destroy the personal information.
- The Personal Information Protection Officer supervises and manages the destruction of personal information to ensure proper execution.
- The Company destroys personal information stored in electronic files so that the records cannot be recovered. Personal information stored in paper documents is shredded and destroyed.
Article 3. Provision of Personal Information to Third Parties
A. Except with the customer's consent or as required by applicable laws and regulations, the Company will not provide customers' personal information to any third party beyond the scope notified in [Article 1, Purpose of Personal Information Processing, Collection Items, Retention and Use Period]. However, customers' personal information may be provided only in the following cases:
① ① When special provisions exist in law or it is unavoidable to comply with legal obligations.
② When it is unavoidable for a public institution to perform its duties as prescribed by law.
③ When it is clearly deemed necessary to protect the urgent life, body, or property interests of the data subject or a third party.
④ When it is necessary to achieve the Company's legitimate interests and clearly takes precedence over the rights of the data subject.
However, this provision is limited to cases where it is significantly related to the Company's legitimate interests and does not exceed a reasonable scope.
⑤ When urgently necessary for public safety and well-being, such as in matters affecting public health.
⑥ When the rights and obligations of the service provider are completely transferred or assumed, such as through a sale, merger, or acquisition.
However, in this case, the company will provide advance notice of the transfer of personal information, the recipient, and the methods and procedures for customers to implement if they do not wish to transfer.
B. The company provides personal information as follows:
① Personal information items provided with customer consent
| Recipient | Items provided | Purpose of use by recipient | Retention and use period by recipient | Basis for provision | |
|---|---|---|---|---|---|
| Shilla HM Co.,Ltd. | Name (Korean, English), date of birth, gender, contact number, email address, ID and Shilla Rewards number | Member Registration | To sign up online | Until membership withdrawal | Article 17 (1) 1 of the Personal Information Protection Act (Consent of the Data Subject) |
| Name (Korean, English), gender, email address, contact number, reservation details (length of stay, room type, number of people, hotel name) and credit card information (card type, card number and expiration date) | Reservations | To make reservations and provide customer service | Five (5) years after stay | ||
| Name (Korean, English), gender, nationality, email address, contact number, length of stay and credit card information (card type, card number and expiration date) | Online Reservations | To make online reservations and provide customer service | |||
| Name (Korean, English), gender, date of birth, email address, contact number, ID and Shilla Rewards number | To provide Shilla Rewards services | Until membership withdrawal | |||
| Samsung Card | Shilla Rewards number | Issuance of affiliated cards and provision of affiliated services | Until withdrawal/cancellation of affiliated card | Article 17 (1) 1 of the Personal Information Protection Act (Consent of the Data Subject) | |
② Personal information items provided without customer consent
| Recipient | Items provided | Purpose of use by recipient | Basis for provision |
|---|---|---|---|
| Seoul Customs, Jeju Customs | Name (Korean/English), nationality, unique identification information (passport number/resident registration number/alien registration number) | Money Exchange Operator Management | Article 18 (2) 2 of the Personal Information Protection Act (Provisions of Other Laws), Article 20 of the Foreign Exchange Transactions Act |
C. If personal information is provided to a third party outside the country, guidance is provided in [Article 5: Transfer of Personal Information Outside the Country].
Article 4. Outsourcing the Handling of Personal Information 
A. To provide smooth service, The Company operates by entrusting personal information processing tasks to external specialized companies as follows.
| Trustee | Job Description | Re-trustee | Job Description |
|---|---|---|---|
| Samsung SDS | Operation and maintenance of the computer system | Miracom Inc, Pentacreed, Feelatech | Operation and maintenance of the computer system |
| S-Tec System | Operation of CCTV systems | ||
| MG Credit Information | SHILLA S Membership Management and Customer Service | ||
| Shilla HM Co.,Ltd. (Shilla Stay Dongtan, Jeju, Mapo, Gwanghwamun and Seocho) | Integrated reservation services and other activities for registration of Shilla Rewards members, modification of Shilla Rewards member information, awarding and redemption of Shilla Rewards points and customer response | ||
| Shilla HM Co.,Ltd. (Shilla Monogram Danang) | Reservations and Customer Service | ||
| DAOU Tech, INC. | SMS, MMS sending agency | ||
| BIZTALK | 상Product promotion and LMS for Shilla Rewards expiry points information. | KaKao | KakaoTalk notification sending agency |
| Earlysloth Co., Ltd. | Investigates customer satisfaction | ||
| Transcosmos Korea | Call center/Customer service & response | ||
| Netsbridge Co., Ltd | TV contents service | ||
| SHP Corporation | Operation of Fitness Center (VANTT) | ||
| HOSAN SERVICE CO., Ltd BILLIS KOREA (C) |
Room Cleaning, Maintenance Service | ||
| NHN KCP Corp., NICE Payments | Electronic payment agency | ||
| EDGERANK | Event winner selection and personal information gathering for prize delivery, shipping & handling for prize delivery | ||
| Global Foodtech Conpany | Reservation service & customer satisfaction investigation | ||
| MODUSIGN | Provides electronic contract signing support | Danal | Identity verification when setting up mobile phone authentication |
| NHN Cloud | Sends KakaoTalk notifications | ||
| CheomSoft | Sends emails | ||
| Channel Corp. | Customer center operations and customer support | ||
| Deep BlueDot | Automated VOC analysis | ||
| NICE Information Service | Mobile phone authentication for identity verification |
B. When concluding a consignment contract, the Company, in accordance with Article 26 of the Personal Information Protection Act (Restrictions on Processing of Personal Information Due to Consignment of Work), specifies in the contract or other document matters the prohibition of processing personal information for purposes other than the performance of the consigned work, technical and administrative protective measures, restrictions on re-consignment, education and management/supervision of the consignee (including sub-consignees), and responsibilities such as compensation for damages. The Company also supervises whether the consignee (including sub-consignees) safely processes personal information.
C. In accordance with Article 26, Paragraph 6 of the Personal Information Protection Act (Restrictions on Processing of Personal Information Due to Outsourcing), the consignee obtains the Company's consent when re-outsourcing personal information processing.
D. If there are any changes to the details of the entrusted work or the trustee, the Company will disclose them without delay through the personal information processing policy.
E. If personal information processing is outsourced to a foreign country, guidance is provided in [Article 5: Transfer of Personal Information Abroad].
Article 5. International Transfer of Personal Information
A. The Company transfers customers' personal information internationally in accordance with Article 28-8 (International Transfer of Personal Information), Paragraph 1, Subparagraph 1 (Consent of the Data Subject) of the Personal Information Protection Act, as follows. You may refuse to consent to this transfer. However, if you do so, you will not be able to use Shilla Rewards services, such as accumulating Shilla Rewards points and receiving benefits when using SHILLA MONOGRAM DANANG (Da Nang, Vietnam).
| Receiving Country | Recipient | Date and Method of Transfer | Items Transferred | Purpose of Use | Retention and Use Period | |
|---|---|---|---|---|---|---|
| Vietnam | SHILLA MONOGRAM DANANG (QUEVIET - QUANGNAM COMPANY LIMITED) info@danang.shillamonogram.com |
Secure network transmission between systems when making reservations, canceling, or changing reservations | Member Registration | Name (Korean, English), gender, date of birth, email address, contact number,and Shilla Rewards number | To provide Shilla Rewards services | Until membership withdrawal or withdrawal of consent |
| Reservation | Name (Korean, English), gender, date of birth, email address, contact number, length of stay, and Shilla Rewards number | |||||
B. Pursuant to Article 28-8 (International Transfer of Personal Information), Paragraph 1, Subparagraph 3 (Entrustment of Processing for Contract Performance) of the Personal Information Protection Act, the Company entrusts the processing of customers' personal information overseas as follows. This information is essential for service provision, and if you decline the international transfer, you will not be able to use the service. If you do not wish to have your information transferred internationally, you may cancel your membership on the website or mobile app, or request cancellation through the Customer Service Center.
| Receiving Country | Recipient | Date and Method of Transfer | Items transferred | Purpose of Use | Retention and Use Period |
|---|---|---|---|---|---|
| Japan | TableCheck Inc. global-support@tablecheck.com |
Secure network transmission between systems when making reservations, canceling, or changing reservations | Name (Korean, English), email address, contact number | Stores information required for dining reservations | Three (3) months from the last visit |
Article 6. Measures to Ensure the Security of Personal Information 
A. The Company is taking the following measures to ensure the security of personal information.
① Administrative measures: Establishment and implementation of an internal management plan, regular employee training, etc.
② Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs, etc.
③ Physical measures: Access control to computer rooms, archives, etc.
B. The Company uses access to customers' mobile devices to provide services through mobile apps for the following purposes. Upon initial launch of the mobile app, required and optional access permissions are notified and consent is obtained. Refusing optional access permissions does not restrict service use.
| Classification | Access Rights | Purpose | |
|---|---|---|---|
| Android, iOS | Optional | Notifications | Used when receiving push notifications |
| Phone | Used to identify user devices and configure push preferences | ||
| Gallery | Used when attaching photo images | ||
| Camera | Used to generate app coupon barcodes | ||
C. The Company is committed to safely managing the personal information of its data subjects. In addition to the security measures required by the Personal Information Protection Act, the Company is also making additional efforts to protect personal information.
- To protect personal information, the Company requires employees to sign an information protection pledge and a confidentiality pledge. It also establishes procedures for accessing and managing customer personal information and ensures that employees are aware of and comply with them.
- The Company strives to securely process personal information and promote a culture of personal information protection through various personal information protection activities, including mock malicious email training, regular information security education, and mock breach response drills.
- The Company has been disclosing its information security status, including information security investment and personnel status, since 2022. (See The Shilla Hotel's information security disclosure status.)
- The Company has obtained the ‘Information Security Management System Certification (ISMS)’ and is managing information safely.
| Certificate Name | Certificate Validity Period | Certification Authority |
|---|---|---|
| ISMS | 2023-12-20 ~ 2026-12-19 | Korea Internet & Security Agency |
Article 7. Installation andOoperation of Automatic Personal Information Collection
Devices and Refusal Thereof 
A. Cookies are small pieces of information that a website server sends to your browser (Edge, Chrome, etc.). Cookies are stored on your computer or mobile device and are automatically transmitted from your browser to the server when you access the website.
B. The Company uses cookies to store and periodically retrieve usage information to provide customers with convenient services.
| Items Collected | Purpose of Collection | Retention Period |
|---|---|---|
| Site Language | To facilitate customer convenience | One (1) day |
| Whether to Save ID, Encrypted ID | To provide a service which saves ID | Thirty (30) days |
C. You can block cookies using the following methods. However, if you reject cookies, you may experience limitations in convenient features such as ID storage.
① How to block on web/mobile browsers
| Browser | How to Block |
|---|---|
| Chrome | - Select the "⁝" icon in the top right corner of your web browser > New Incognito Window (shortcut: Ctrl+Shift+N) - Select the "⁝" icon in the top right corner of your mobile browser > New Incognito Tab |
| Edge | Select the "..." icon in the top right corner of your web browser > New InPrivate Window (shortcut: Ctrl+Shift+N) |
| Safari | Mobile Device Settings > Safari > Block All Cookies |
| Samsung Internet | Select the "Tab" icon at the bottom of your mobile browser > Turn on Incognito Mode |
② How to delete cookies stored in a web browser and block third-party cookies
| Browser | How to Block |
|---|---|
| Chrome | - Settings > Privacy and Security > Delete Browsing Data - Settings > Privacy and Security > Third-party Cookies > Block Third-party Cookies |
| Edge | - Settings > Cookies and Site Permissions > Manage and Delete Cookies and Site Data - Settings > Cookies and Site Permissions > Manage and Delete Cookies and Site Data > Select "Block Third-party Cookies" |
D. The Company uses Google Analytics, a service provided by Google, to analyze your use of the website. The information generated by Google Analytics is transmitted to and stored by Google on servers located in the United States and is subject to the Google Privacy Policy. GGoogle processes the information on behalf of the Company to evaluate your use of the website, compile reports on website activity, and provide other services related to internet usage. The information processed is randomized so that it cannot identify specific individuals. However, customers can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on or by refusing cookie settings in their web browser. For more information about Google Analytics, please refer to the Google Analytics homepage.
| Modes of Collection | Collected Items | Purpose of Collection | Method of Collection | Retention and Use Period |
|---|---|---|---|---|
| JavaScript (Web Pages) | Randomized Shilla Rewards number, Shilla Rewards membership, membership level, Shilla S membership | - To improve service and stability through statistical analysis of website access frequency and visit time - To check and resolve errors that occur while using the service |
When a user visits a website or uses a service, information such as cookies is automatically collected and transmitted through the browser. | Fourteen (14 months) after collection date |
Article 8. Rights and Obligations of Data Subjects and Legal Representatives
and Methods of Exercise
A. Customers may access, correct, delete, suspend processing, or withdraw consent to their registered personal information at any time. To access, correct, delete, suspend processing, or withdraw consent to personal information, log in to the website or mobile app and click "Edit Profile" on the My Page to access or correct the information directly. Alternatively, contact the customer service center by phone or email at +82-2-2233-3131 or by email. We will verify your identity and take action without delay.
B. Customers can withdraw their membership at any time by going through the identity verification process on the website's 'Withdrawal Request' page or by using the 'Website Withdrawal' service on the Personal Information Portal (https://www.privacy.go.kr/).
C. If a customer requests correction of errors in their personal information, the personal information will not be used or provided until the correction is complete. Furthermore, if incorrect personal information has already been provided to a third party, we will promptly notify the third party of the correction process and take steps to ensure the correction is made.
D. Customers may exercise their rights to access, correct, delete, or request suspension of processing of their personal information at any time. These rights may be exercised through a legal representative or authorized representative, such as the data subject. In such cases, a power of attorney in the format of Appendix 11 of the "Personal Information Processing Methods" must be submitted.
[Appendix 11 of the “Personal Information Processing Methods” Power of Attorney]
E. The data subject's request to view or suspend the processing of personal information may be restricted under Article 35, Paragraph 4 (Viewing Personal Information) and Article 37, Paragraph 2 (Suspension of Personal Information Processing, etc.) of the Personal Information Protection Act.
F. The Company verifies whether the person exercising the data subject's rights is the data subject or a legitimate agent. If there are legitimate grounds for refusing the request, the Company will notify the subjet of the request and explain the reason.
G. Customers are advised to enter their personal information accurately and keep it up-to-date to prevent problems that may arise from incorrect personal information.
H. The Company guarantees the data subject's right to self-determination of personal information and strives to provide consultation and redress for damages resulting from personal information infringements. To report or request consultation on a personal information infringement, please contact the Customer Service Center.
[Customer Service Center]
| Representative | Shilla Rewards | Shilla S | |
|---|---|---|---|
| Department in Charge | SBS | HQ Marketing | HQ Marketing |
| Contact Number | 82-2-2233-3131 | 82-2-2230-1400 - 2 | 82-2-2230-1400 - 3 |
| Email Address | comments.shilla@samsung.com | shilla.rewards@samsung.com | shillas.membership@samsung.com |
| Fax | 82-2-2230-3740 | 02-2230-3087 | |
| Address | Hotel Shilla 249, Dongho-ro, Jung-gu, Seoul | ||
Article 9. Personal Information Protection Officer and Methods of Redress for
Infringement of the Rights of Data Subjects 
A. In order to protect customers' personal information and handle complaints and opinions regarding personal information, the Company has designated a Personal Information Protection Officer and department as follows.
[Chief Privacy Officer (CPO)]
- Name: Lee, JaeWon
- Department: TR Information Security Team
- Title/Position: Vice President
- Contact Number: 82-2-2233-3131
- Email Address: comments.shilla@samsung.com
[Department in Charge of Personal Information Protection]
- Department: Hotel & Leisure Human Resources
- Contact Number: 82-2-2233-3131
- Email Address: comments.shilla@samsung.com
B. Customers may report any privacy-related complaints arising while using the service to the Personal Information Protection Manager or the relevant department. The Company will provide a prompt and sufficient response to customer reports. For other inquiries or reports regarding personal information infringements, please contact the following organizations.
| Agency | URL | Contact Number |
|---|---|---|
| Personal Information Dispute Mediation Committee | www.kopico.go.kr | 1833-6972 |
| Personal Information Infringement Notification Center | privacy.kisa.or.kr | 118 |
| Korean National Police Agency | ecrm.police.go.kr | 182 |
Article 10. Protection of Personal Information of Children Under 14 Years of Age
A. The Company does not collect personal information from children under 14 years of age. However, if consent is required to process the personal information of a child under 14 years of age (e.g., for offline use of facilities (Gymboree Kids' Club, Kids' Island) and GAO programs (children's programs)), consent will be obtained from the child's legal representative.
B. When obtaining consent from a legal representative regarding the processing of personal information of a child under 14 years of age, the Company will directly deliver a written statement of consent to the legal representative and obtain their signature and seal for confirmation.
C. Personal information will be securely managed during use and immediately deleted upon expiration of the retention and use period.
Article 11. Possibility of Disclosure of Sensitive Information and Methods of Selecting Nondisclosure
A. In accordance with Article 23, Paragraph 3 of the Personal Information Protection Act, if the Company determines that the information disclosed during the provision of goods or services contains sensitive information, posing a risk of privacy violation, the Company will disclose the possibility of disclosure of sensitive information and the method of selecting nondisclosure in its privacy policy prior to providing the goods or services.
B. The Company collects and uses sensitive information to provide services as follows, and the collected sensitive information will not be disclosed to external parties.
① ① To ensure safe dining for customers, the Company collects allergy information when making restaurant (dining) reservations. This information is used for restaurant operation and accident prevention purposes. If you do not wish to disclose sensitive information, please select "Disagree" during the restaurant (dining) reservation process.
② The Shilla Jeju operates a kids' program for children staying at the hotel. To ensure the safety of the program, the Company collects sensitive information (disease information, medication information, and allergy information) during the program. This information is used for program operation and accident prevention purposes. If you do not wish to disclose sensitive information, please select "Disagree" during the program reservation process.
Article 12. Duty of Notification 
A. If any additions, deletions, or modifications to this Privacy Policy arise due to enactment or amendments to laws, government policy changes, changes in our internal Company policies, or changes in security technology, we will promptly announce the changes through our website.
Privacy Policy version : v12.4
Initial enforcement: April 25th, 1998
Last modification and enforcement: : November 3rd, 2025
B. You can check the previous Privacy Policy below.
Dates of Amendment: September 18th ~ November 2nd, 2025