Personal Information Policy of the Website

This personal information policy specifies the terms related to the management and handling of personal information of members or non-members (hereinafter referred to as “the Users”) using the websites of Asiana Airlines, Inc. (hereinafter referred to as Asiana Airlines ) including “flyasiana.com” and “dutyfree.flyasiana.com”.

Asiana Airlines is committed to protecting the rights and interests of its users by complying with the personal information protection regulations under the relevant laws and regulations, such as the Personal Information Protection Act, that information and communication service providers must comply with, and also to establishing a personal information processing policy in accordance with relevant laws.

1. Items of Personal Information and Method of Collection
A) Items of Personal Information Collected
Asiana Airlines collects the following personal information to enable membership services, customer responses and other services for the Users.
▷ Enrollment in Asiana Club
- Required Information: Name (Korean and/or English spellings), Gender, Telephone number(Mobile Phone Number), E-mail address, Place of residence, ID authentication number, ID and Password
- Optional Information: Name of company, Department, Position, Home Phone Number, Address, ZIP code
- Information Additionally Collected for Enrollment of Members below age 14: Name, Date of birth of guardian, E-Mail
▷ Registration to Family Mileage Plan of Asiana Club: Documents proving family relations
▷ Homepage Login
- Optional Information: Naver Authorization ID, Facebook Authorization ID, KakaoTalk Authorization ID
▷ Reservation of Flight Tickets
- Required Information: Name of passenger, Date of birth, Telephone number, E-mail address , Gender, Credit card payment information (credit card number and transaction authentication number), Account transfer information (name of bank and account number)
- Optional Information: Membership number, Passport information (passport number, date of expiry, place of issuance and nationality) – US (including Saipan and Guam), Some Europe routes required
▷When using auto check-in
- Required Information: Name, passport information (passport number, expiration date, issuer, nationality), date of birth, gender, contact information (telephone number or e-mail address)
▷ When using online check-in
- Required Information: Required Field: Name, passport information (passport number, expiration date, issuer, nationality), date of birth, gender
- Optional Information: telephone number or e-mail address
▷ Use of Customer Center
- Required Information: Name, Contact information, E-mail address
- Optional Information: Membership number, Boarding information, Date of birth
▷ Order of Duty-Free Goods
- Required Information: ID, Password, Membership number, English and korean name of a person who places the order, English and korean name of passenger, Date of birth, Contact information, E-mail address, Credit card number, Credit card authentication information, Passport information of passenger.
- Optional Information: In-flight duty free points information, Address to which the points reward and promotion gift will be delivered, Mileage information.
▷ Order of Logo goods(Mileage)
- Required Information: ID, Password, Mileage password, Contact information, Name of recipient, E-mail address, Delivery address
- Optional Information: Delivery message
▷ Participation in Events
- When it is necessary to collect additional personal information beyond what Asiana Airlines has collected at point of enrollment to participate in events, Asiana Airlines notifies users of the collection of additional personal information and obtains consent.
▷ Automatically collected records of usage of services
- Website and app browsing history, cookies, access IP information, operating system version and device model name (app)
▷ Joining Asiana Corporate Plus membership
- Required Information: Company name, Company registration number, Corporate registration number, Type of industry, Company Location, Company address, Number of workers, Name of CEO, Main phone number, ID, Password, Certified copy of corporate registration
- Optional Information : Industry, Number of workers, Annual Business trip budget, Main destinations, Corporate travel program in other airlines, How did you hear about us
▷ Registering fellow workers in Asiana Corporate Plus membership
- Required Information: Name, Membership number, E-mail address, Certificate of employment, Boarding information
- Optional Information: Department, Positon
▷ For usage of Mileage Mall (Excluding In-flight duty free and Logo Shop)
- Requirements: Membership Number, Password, Mileage Password, Phone number (Phone Number, Weekly Deal Affiliates only)
B) Method of Collection of Personal Information
Asiana Airlines collects personal information through the website enrollment, customer centers, boards and events. Users may agree with the terms of collection of personal information by clicking the "I Agree" button when they agree with the terms of the personal information policy or the terms and conditions of Asiana Airlines. When the Users click the "I Agree" button, it is deemed that they have agreed with the terms of collection of personal information.

▷ When using Chatbot Service
- Required Information : Chat conversation contents, User Key
※ Additional personal information may be collected to participate in events, Asiana Airlines notifies users of the collection of additional personal information and obtains consent.

2. Purpose of Collection and Use of Personal Information
A. Performance of the contract for services provision
Reservation and issuance of flight tickets, advance order of duty-free goods, provision of contents, ID authentication for financial transactions and financial services
B. Membership Management
Use of membership services, ID authentication, confirmation of intent to subscribe and processing of requests
C. Marketing and Advertising
Provision of information on new services, new products and events and statistics on service use

3. Disclosure of Personal Information
A. Asiana Airlines shall not disclose the personal information of Users to a third party or use the personal information of Users for purposes other than the purpose of the use of information specified in this personal information policy, without the prior consent of the Users, except when required by laws, government policies and government orders.
B. Asiana Airlines collects the personal information of members or discloses the personal information of members to a third party when given the consent of members. When members use the services of partners, a minimal amount of personal information of the members may be disclosed to the partners. Detailed terms are specified in the privacy policy of Asiana Club. >>Click to view

4. Entrustment of Management of Personal Information
Asiana Airlines entrusts the personal information of members as follows for better services, and defines the terms of entrustment of personal information management for the safe management of personal information in accordance with laws. The following organizations perform the following duties:
A. Organizations entrusted to manage information of Asiana Club
Organizations entrusted to manage information of Asiana Club comply with the privacy policy of Asiana Club >>Click to view
B. Organizations entrusted to manage services of Asiana websites
- Operation and computer processing of the websites: Asiana IDT, Inc.
- ID authentication: NICE
- Online payment services: KICC, KFTC, LG CNS, Korea VAN Service, Firstdatacorp., China UnionPay, E-context, Alipay, WorldPay, US Bank (Elavon), American Express, Discover, wechat, NHN PAYCO Corp
- Online ticket reservation: Amadeus IT Group, S.A.
- Ticket reservation SMS services: kt corp., LG CNS, INFOBIP
- Gift distribution services: Home delivery service (Dream Logistics), SK M&SERVICE Co.Ltd, KT MHOWS.
- Customer Center, Domestic Flight Reservation, Asiana Club: Will&Vision, HUNECT
- Mileage Mall: Megazone
- Analysis of website usage patterns: Google, Inc.
- Chatbot Service : Microsoft Corporation

5. Terms of Retaining and Using Personal Information
A. Asiana Airlines holds and uses the personal information provided by the Users during the period in which the Users use the services of Asiana Airlines.
B. The term of retaining the personal information and the procedure of disposal of personal information followed by Asiana Airlines is determined in accordance with the privacy policy of Asiana Club. >>Click to view
C. Asiana Airlines disposes information which was maintained for a certain period of time in accordance with the applicable laws, including the Act on Consumer Protection in Electronic Commerce Transactions and etc.
- Records on contracts and withdrawal of subscription (term of maintenance: 5 years): the Act on Consumer Protection in Electronic Commerce Transactions
- Records on payments and supply of goods (term of maintenance: 5 years): the Act on Consumer Protection in Electronic Commerce Transactions
- Records on consumer complaints and disputes procedure (retention period: 3 years) : Consumer Protection Act in Electronic Commerce Transactions
- Records on visits to websites (term of maintenance: 3 months): the protection of Communications Secrets Act
- Records on participation in events (term of maintenance: 1 year): reasons for maintenance of information in accordance with the corporate policy
- Other records maintained: until the purpose of collection and use of information is fulfilled
D. For Asiana’s first online duty free shop purchase event and provision of benefits by membership level, the minimum information registered (name, member ID, total purchase amount) when purchasing duty-free products will be stored until membership withdrawal.
E. Notwithstanding the regulations of the previous Article, when there is a need to maintain the personal information in accordance with the applicable laws, including the Act on Consumer Protection in Electronic Commerce Transactions or when the purpose, period, and specific items of personal information are defined and notified to respond to legal disputes including litigation or settlement of charges, Asiana Airlines may maintain the personal information of the Users.

6. International Transmission of Personal Information
To fulfill the contract and to offer improved convenience to our customers, we outsource the processing of personal information overseas as follows.

1) AMADEUS
A. Personal information transmitted to
- AMADEUS IT GROUP,S.A (dataprotection@amadeus.com)
B. Personal Information Transmitted
- Ticket reservation: membership number, passenger’s name, date of birth, gender, phone number, e-mail address.
- Ticket reservation on Americas Routes: passport information (passport number, expiration date, issuing country, nationality)
- Purchasing: card number, expiration date, transaction approval number (credit card payments), transaction number (bank transfer payments)
- Enrollment or Change in Membership Information : Asiana Club membership number, membership status, expiration date of membership status, Korean and/or English name, date of birth, nationality, address, gender, phone number, e-mail address, available Miles, number of boarding and boarding miles within the previous 2 years
C. Country, Date and Method of International Transmission
- Reservation Information : Germany, Transmission upon completion of reservation, Transmission between Asiana Airlines and AMADEUS via a secured network
- Membership Information : Germany, When enrolling or changing information via a dedicated network
D. Purpose of Personal Information Use and Retention Period
- Reservation Information: Operation and maintenance of Asiana Airlines reservation system, up to 5 years after transmission
- Membership Information: Use of membership services and retention of personal information until the end of the contract term or withdrawal of membership

2) Google
A. Personal information transmitted to
- Google
B. Personal Information Transmitted
- When using online services: Cookies, IP information, access log
C. Country, Date and Method of International Transmission
- Log information: United States, when using online services, transmission via public network (security protocol processing)
D. Purpose of Personal Information Use and Retention Period
- Log information: Save log, 26 months after transfer of personal information
- Purpose of use: Homepage usage analysis via Google Analytics

7. Method of Disposal of Personal Information
The personal information of Users is immediately disposed of after the purpose of its collection and use has been fulfilled. Personal information saved in a digital format is deleted by using technology that prevents the recovery of records.
A. Procedure of disposal
- Information entered by Users for enrollment or other purposes is disposed of for the protection of information in accordance with the corporate policy and other applicable laws after the purpose of its collection has been fulfilled.
- The above information, unless otherwise required by law, shall not be used for purposes other than the original purpose.
B. Method of disposal
- Personal information printed on paper is shredded or incinerated for disposal.
- Personal information saved in a digital format is deleted by using technology that prevents the recovery of records

8. Personal information rights and how to exercise them
8-1) Rights of information subjects and their legal representatives A. The information subject may exercise the right to request Asiana Airlines to access, correct, delete, or suspend processing of personal information at any time. If such a request is made, Asiana Airlines will take the necessary measures without delay, after verifying whether it is the same person.
B. Information subjects and their legal representatives may view or modify their registered personal information at any time, and may request cancellation of their membership.
C. To view and modify your personal information, you can change or withdraw from the online platform MY ASIANA menu, or you can request it through the Asiana Club Center at 1588-8180.
D. The right to view personal information and request suspension of processing may be restricted in accordance with Article 35, Paragraph 4, and Article 37, Paragraph 2, of the Personal Information Protection Act. In addition, requests for correction or deletion of personal information cannot be made if other laws state that such personal information is subject to collection.

8-2) Personal information of children and rights of their legal representatives A. Asiana Airlines shall obtain the consent of guardians when it collects the personal information of a child under age 14, discloses the collected information to a third party or uses the personal information for purposes other than the original purpose. Accordingly, a child under age 14 may register only when his or her guardian agrees with the terms of collection of the personal information of the child.
B. The guardian of a child under age 14 may request to view, correct, terminate or withdraw from the agreement in relation to the personal information of the child. Asiana Airlines, upon receiving such request, shall immediately take the necessary measures after authenticating the ID of the guardian.
C. The User or guardian may view or edit their own personal information or the personal information of the registered child under age 14. The User or guardian may also request the termination of membership.
D. The User or the child under age 14 may view or edit personal information via the My Asiana menu on the websites, or request to view or edit the personal information by calling Asiana Club Center (1588-8180). E. When a User has requested the correction of an error in personal information, the personal information shall not be used or disclosed until the correction is completed.

8-3) The rights of EU information subjects
The information subject may exercise the right not to be subject to automated decision-making, including information provision, access, correction, deletion (right to be forgotten), restriction of processing, transfer of personal information, objection, profiling, etc.

9. Provision of other personal information
A. In accordance with Article L 237 -7 of French Homeland Security Code, please be informed that air carriers may transmit reservation, checking and boarding data collected from their passengers (API / PNR) to the French national public services and competent authorities for the purposes and under conditions as defined in the Decree N° 2014-1095 dated 26/09/2014, modified by decree 2018/714 dated August 3rd 2018.
B. Domestic passengers must submit an aircraft arrival/departure report (GD). Accordingly, the passenger’s gender, name, nationality, and date of birth will be provided to the government through the customs CIQ information sharing system.

10. Technical Measures for the Protection of Personal Information
A. Asiana Airlines takes the following technical measures to prevent the loss, theft, leakage, external attacks on and hacking of information, and aims to have the highest level of security in relation to the processing of the personal information of the Users.
B. The personal information of Users is secured using passwords, and all files and data transmitted are encrypted. Material data is protected using additional security functions.
C. Asiana Airlines uses anti-virus solutions to prevent damages from PC viruses, and regularly updates the anti-virus programs.
D. Asiana Airlines selects a security solution for the safe transmission of personal information, using the encryption algorithm.
E. Asiana Airlines uses a security solution that blocks external attacks to prevent the leakage of personal information of the Users through hacking, and monitors for invasions around the clock by installing the invasion detection system.
F. The number of managers processing personal information of the Users is limited to the minimum level, and the managers are subject to continuous security training and monitoring of compliance with the personal information policy.

11. Asiana Airlines’ Cookie Policy
Asiana Airlines uses cookies to provide online services. Cookies are very small text files that are stored on your device when you visit our website. Cookies save data to provide a better user experience through a continual improvement of online services. They do not contain any information that would identify a person. By using this website, you consent to the use of cookies in accordance with our policy. If you would like see more information or to change the settings for cookies (which includes the option to reject the use of cookies), please check our Cookie Policy.

12. Processing of Suggestions and Complaints
Asiana Airlines enables Users to freely express opinions and raise complaints in relation to the protection of personal information. Suggestions or complaints submitted to the following contacts are immediately processed, and Users will be notified of the results.
▷ Websites: Customer Center ☞ Click
▷ Asiana Club Service Center: +82-2-2669-8180
▷ Online Duty-Free Shop: +82-2-2669-3434

13. Presence or absence of automated decisions
We do not classify all information subjects as automated decisions.

14. Administrators in Charge of Management of Personal Information of Websites
To protect your personal information, Asiana Airlines designates a Privacy Policy Officer as follows. Users may submit inquiries related to the protection of all personal information that occurred while using the Asiana Airlines’ services, requests for access to information, and requests for deletion of information, to the privacy policy department. Asiana Club’s responsibility to protect personal information is in accordance with the Asiana Club Privacy Policy.

For reports or consultations on infringements of privacy rights, please contact the following organizations:
- National Police Agency Cyber Investigation Bureau (ecrm.cyber.go.kr / call 182)
- Supreme Prosecutor’s Office Republic of Korea(http://www.spo.go.kr/eng/index.jsp / call 1301)
- Korea Internet & Security Agency(privacy.kisa.or.kr / call 118)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972 )

15. Exceptions to the Application of the Personal Information Policy
Asiana Airlines may provide users with links to websites or materials of other companies through its websites. Asiana Airlines does not have control over external websites and materials, and thus the personal information policy of Asiana Airlines does not apply. Please check the personal information policy of any website you visit by clicking on a link included in an Asiana Airlines website.

16. Changes to the Privacy Policy
Modifications to this personal information policy will be announced 7 days before their application through the news section of the websites.

17. [Miscellaneous]
☞ This personal information policy takes effect on November 21, 2001.

Date of official notice: February 17,2023
Date of revision: February 24, 2023

This Personal Information Policy is based on that of the official Korean interpretation, and in the case of any discrepancy, the Korean interpretation will take precedence.