<Crepun Tour> Privacy Policy

▪ Purpose of processing personal information

<Crepun Tour> processes personal information for the following purposes. Personal information being processed will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the 「Personal Information Protection Act」.

1. For the purpose of personal identification, personal identification, prevention of fraudulent use by bad members and unauthorized use, confirmation of intention to join, preservation of records for dispute settlement, handling of civil complaints such as complaint handling, and delivery of notices We process your personal data.

2. Travel consultation Personal information is processed for the purpose of consultation on reservation of travel products.

3. Reservation of travel products Personal information is processed for the purpose of reserving travel products and determining whether departure is possible.

4. Travel product service provision Confirmation of flight/hotel reservation information and immigration information, confirmation of reservation details and consultation, travel insurance subscription support, implementation of domestic and overseas travel services, travel customer management, provision of contents, payment for travel services, and We process personal information for the purpose of settlement and refund.

5. Handling complaints We process personal information for the purpose of collecting opinions, handling complaints, and handling civil complaints.

▪Personal information processing and retention period

① <Crepun Tour> processes and retains personal information within the period of holding and using personal information according to the law or within the period of holding and using personal information agreed upon when collecting personal information from the information subject.

② Each personal information processing and retention period is as follows.

1. Homepage member registration: until member withdrawal

2. Travel consultation: Destroy without delay after completing travel consultation

3. Reservation of travel products: Until the retention period according to service provision and related laws

4. Travel product service provision: storage for up to 5 years

- Records on contract or withdrawal of subscription: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)

- Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce, etc.)

- Records on consumer complaints or dispute handling: 3 years (Act on Consumer Protection in Electronic Commerce, etc.)

- Records on display and advertisement: 6 months (Act on Consumer Protection in Electronic Commerce, etc.)

③ However, if it falls under the following reasons, it will be kept until the end of the reason.

1. If an investigation or investigation is in progress due to violation of related laws, until the end of the investigation or investigation

2. In the event that credit/debt relationships remain due to the use of the website, until the settlement of the relevant credit/debt relationship

▪Personal information items to be processed

<Crepun Tour> handles the following personal information items.

1. Homepage member registration, travel consultation, travel product reservation,

• Required items: name, ID, password, email address, contact information

2. Travel advice

• Required items: name (in Korean), date of birth, email address, contact information

• Optional items: Name (English), address, mobile phone number, marital status, wedding anniversary

3. Travel product reservation

- Domestic travel products

• Required items: name, date of birth, gender, mobile phone number, e-mail address, contact number, address, credit card number, expiration date, relationship with the contractor

4. Provision of travel product services

- Domestic travel products

• Required items: name, date of birth, gender, mobile phone number

▪ Provision of personal information to third parties

① <Crepun Tour> processes the personal information of the information subject only within the scope specified in the purpose of processing personal information, and falls under Articles 17 and 18 of the 「Personal Information Protection Act」 such as the consent of the information subject and special provisions of the law. Personal information is provided to a third party only in the case of

② In the following cases, <Crepun Tour> may provide personal information to related institutions without obtaining the consent of the information subject in accordance with relevant laws and regulations.

③ <Crepun Tour> may disclose personal information to relevant agencies without the consent of the information subject in the event of an emergency, such as a disaster, infectious disease, incident/accident causing imminent danger to life or body, or imminent loss of property as follows: can provide. <Crepun Tour> provides only the minimum amount of personal information necessary in accordance with the applicable laws and will not be provided differently from the purpose.

  ▪ Consignment of personal information processing

① <Crepun Tour> entrusts the following personal information processing tasks for smooth personal information processing.

Entrusted person (consignee) Consigned business

TossPayments credit card payment approval, virtual account deposit, etc.

② When <Crepun Tour> concludes a consignment contract, in accordance with Article 26 of the 「Personal Information Protection Act」, prohibition of handling personal information for purposes other than the purpose of entrusted business, technical and managerial protection measures, restriction of re-entrustment, management and supervision of consignees, compensation for damages, etc. Responsibilities are specified in documents such as contracts, and we supervise whether the trustee handles personal information safely.

③ If the contents of the entrusted business or the consignee are changed, we will disclose it through this personal information processing policy without delay.

▪Personal information destruction procedures and methods

① <Crepun Tour> destroys the personal information without delay when the personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing.

② If personal information must be kept in accordance with other laws and regulations despite the expiration of the personal information retention period agreed to by the information subject or the achievement of the purpose of processing, the personal information is moved to a separate database (DB) or stored Save by changing.

③ The procedure and method of destroying personal information are as follows.

1. Destruction procedure <Crepun Tour> selects the personal information for which the reason for destruction occurred and destroys the personal information with the approval of the person in charge of personal information protection of <Crepun Tour>.

2. Destruction method <Crepun Tour> destroys personal information recorded and stored in the form of electronic files so that the records cannot be reproduced, and personal information recorded and stored in paper documents is shredded with a shredder or destroyed by incineration.

Measures to ensure the safety of personal information

<Crepun Tour> takes the following measures to ensure the safety of personal information.

1. Administrative measures: Establishment and execution of internal management plans, operation of a dedicated organization, regular employee training

2. Technical measures: Management of access rights such as personal information processing system, installation of access control system, encryption of personal information, installation and renewal of security program

Matters concerning the installation, operation and rejection of automatic personal information collection devices

① <Crepun Tour> uses ‘cookies’ that store and retrieve usage information from time to time to provide individually tailored services to information subjects.

② Cookies are a small amount of information that the server (http) used to run the website sends to the user's computer browser, and is sometimes stored on the hard disk of the user's PC computer.

1) Purpose of use of cookies: It is used to provide optimized information to users by identifying the types of visits and use of each service and website visited by the user, popular search words, and security access.

2) Installation/Operation and Rejection of Cookies: You can refuse to save cookies by setting options in the Tools>Internet Options>Personal Information menu at the top of the web browser.

3) If you refuse to save cookies, difficulties may arise in using customized services.

▪Person in charge of personal information protection

① <Crepun Tour> is responsible for overall handling of personal information, and has designated the person in charge of personal information protection as follows to handle complaints and damage relief of information subjects related to personal information processing.

‣ Privacy Officer

Name: Lee Ji-woong/ Contact: 070-8600-1254, support@aliseon.com

※ You will be connected to the department in charge of personal information protection.

② The information subject may inquire about all personal information protection related inquiries, complaint handling, damage relief, etc. that occurred while using the service (or business) of <Crepun Tour> to the person in charge of personal information protection and the department in charge. <Crepun Tour> will respond to and process inquiries from information subjects without delay.

▪Request for access to personal information

The information subject may request to view personal information in accordance with Article 35 of the 「Personal Information Protection Act」 to the following departments. <Crepun Tour> will make efforts to promptly process the personal information access request of the information subject. ‣ Receipt and processing of personal information access request Name: Lee Ji-woong/ Contact: 070-8600-1254, support@aliseon.com

▪ Rights Infringement Remedy Method ① Information subject can apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency Personal Information Infringement Reporting Center, etc. in order to receive relief from personal information infringement. In addition, please contact the following organizations for reporting or consulting of other personal information infringement.

1. Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr) 96 | Personal Information Handling Policy Guidelines for Travel Business

2. Personal information infringement reporting center: (without area code) 118 (privacy.kisa.or.kr)

3. Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)

4. National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)

  ② <Crepun Tour> guarantees the information subject's right to self-determination of personal information, and strives to provide consultation and damage relief due to personal information infringement. If you need to report or consult, please contact the department in charge below.

  ‣ Customer consultation and reporting related to personal information protection Name: Lee Ji-woong/ Contact: 070-8600-1254, support@aliseon.com

③ The head of a public institution in response to a request made pursuant to the provisions of Article 35 (Access to personal information), Article 36 (Correction or deletion of personal information), Article 37 (Suspension of personal information processing, etc.) of the Personal Information Protection Act A person whose rights or interests have been infringed upon due to a disposition or omission may request an administrative appeal in accordance with the Administrative Appeals Act.

‣ Central Administrative Appeals Commission: (without an area code) 110 (www.simpan.go.kr)