Privacy Policy

Privacy Policy

Asin Tour Co., Ltd. (hereinafter the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act, in order to protect the personal information of data subjects and to promptly and smoothly handle related grievances.

Article 1 (Purposes of Processing Personal Information)

The Company processes personal information for the following purposes.
Personal information being processed will not be used for any purpose other than those listed below, and if the purpose of use changes, the Company will implement necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Membership Registration and Management
   • Confirming intent to register as a member and identifying/authenticating users for membership services
   • Maintaining and managing membership qualifications, preventing fraudulent use of the service
   • Processing personal information for various notices, notifications, and grievance handling.
2. Providing Eco-Tourism Game Services
   • Providing location-based game services, saving and managing game progress
   • Accruing and managing points, verifying game completion
   • Processing personal information for providing customized services and identity verification.
3. Use for Marketing and Advertising
   • Developing new services and providing customized services
   • Providing event and promotional information and opportunities to participate
   • Understanding access frequency and compiling statistics on members' service usage

Article 2 (Items of Personal Information Processed)

The Company processes the following items of personal information:

1. Required Items

• Name, date of birth, ID, password
• Mobile phone number, email address
• Location information (GPS coordinates, visited locations)

2. Optional Items

• Profile photo, nickname
• Points of interest, preferred game difficulty

3. Automatically Collected Items

• Access IP information, cookies, service usage records
• Access logs, visit date/time
• Device information (OS, screen size, device ID)

Article 3 (Processing and Retention Period of Personal Information)

1. The Company processes and retains personal information within the retention/use period required by law, or the retention/use period agreed to by the data subject at the time personal information was collected.
2. The processing and retention periods for each type of personal information are as follows:
   • Membership Registration and Management: Until membership withdrawal (however, if an investigation is underway due to a violation of relevant laws, until such investigation is concluded)
   • Provision of Game Services: Until termination of the service use agreement
   • Consumer Complaints or Dispute Resolution: 3 years, in accordance with relevant laws
   • Records on display/advertising under the Act on Consumer Protection in Electronic Commerce, etc.: 6 months

Article 4 (Provision of Personal Information to Third Parties)

The Company processes data subjects' personal information only within the scope specified in Article 1 (Purposes of Processing Personal Information), and provides personal information to third parties only in cases falling under Article 17 of the Personal Information Protection Act, such as data subject consent or special provisions of law.

The Company does not currently provide personal information to any third party.

Article 5 (Outsourcing of Personal Information Processing)

For the smooth handling of personal information tasks, the Company outsources personal information processing tasks as follows:

Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)

1. Data subjects may exercise the following personal-information-related rights against the Company at any time:
   • Request to view personal information
   • Request for correction in case of errors
   • Request for deletion
   • Request to suspend processing
2. Rights under Paragraph 1 may be exercised against the Company in writing, by telephone, or by email, and the Company will take action without delay.

Article 7 (Destruction of Personal Information)

1. The Company destroys personal information without delay when it becomes unnecessary, such as upon the expiration of the retention period or the achievement of the purpose of processing.
2. The procedures and methods for destroying personal information are as follows:
   • Destruction Procedure: The Company selects personal information subject to destruction and destroys it upon approval from the Company's Chief Privacy Officer.
   • Destruction Method: Personal information recorded and stored in electronic file form is destroyed using methods that prevent the records from being reproduced, and personal information recorded and stored on paper is destroyed by shredding or incineration.

Article 8 (Measures to Secure the Safety of Personal Information)

The Company takes the following measures to secure the safety of personal information:

1. Administrative measures: Establishment and implementation of an internal management plan, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs
3. Physical measures: Access control for computer rooms, data storage rooms, etc.

Article 9 (Chief Privacy Officer)

Data subjects may direct any inquiries, complaints, or requests for remedy related to personal information protection arising while using the Company's services to the Chief Privacy Officer.

Article 10 (Remedies for Infringement of Rights)

Data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Report Center, and other institutions in order to obtain remedies for infringement of personal information:

• Personal Information Dispute Mediation Committee: 1833-6972 (no area code) (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (no area code) (privacy.kisa.or.kr)
• Supreme Prosecutors' Office: 1301 (no area code) (www.spo.go.kr)
• National Police Agency: 182 (no area code) (ecrm.cyber.go.kr)