개인정보 처리방침
The reservation platform service, Selectionist, complies with the "Personal Information Protection Act" and related laws to handle personal information legally and manage it securely in order to protect the rights and freedoms of individuals. In accordance with Article 30 of the "Personal Information Protection Act," Selectionist establishes and discloses this Privacy Policy to guide individuals on the procedures and criteria for personal information processing, and to quickly and smoothly address any concerns regarding personal information processing. This policy may be changed due to government guidelines or changes in Selectionist's internal policies. Therefore, in the event of any revision to this policy, the updated policy will be posted on this website, and we encourage individuals to periodically visit and review the policy to ensure the protection of their valuable personal information.
Article 1 (Consent to the Collection of Personal Information and Methods of Collection)
1. The company provides users with a procedure where they can click either “Agree” or “Disagree” to the terms and conditions of consent. If the user clicks "Agree," it is considered that they have consented to the collection of personal information. However, the company may collect and use personal information without consent in the following cases:
① When it is necessary to collect personal information to fulfill a contract related to the provision of information and communication services, and obtaining normal consent is clearly difficult for economic or technical reasons.
② When it is necessary for billing purposes related to the provision of information and communication services.
③ When there are special provisions in laws and regulations.
④ When it is necessary to collect personal information to fulfill a contract, and obtaining normal consent is clearly difficult for economic or technical reasons.
⑤ When the collection is relevant to the purpose of collection, does not cause disadvantage to the individual, and safety measures are in place.
The following factors will be considered in determining whether the collection is reasonable:
1) Relevance to the original purpose of collection
2) The predictability of additional use of personal information based on the circumstances or processing practices
3) Whether there is any infringement on the individual's rights
4) Measures to ensure safety, such as pseudonymization or encryption
2. When the company collects personal information, it informs users in advance and obtains consent. The company collects personal information through the following methods:
① When users agree to personal information collection during membership registration or service use and provide information directly
② When receiving personal information from partner services or organizations
③ When personal information is collected through customer service consultations via web pages, apps, emails, faxes, or phone calls
④ When personal information is collected through events or activities conducted both online and offline
Article 2 (Purpose of Collecting Personal Information, Collection Items, Retention and Period)
1. In cases where it is required to comply with legal regulations and obligations, or to enter into a contract with the data subject, personal information may be processed without the consent of the data subject.
2. Selectionist processes personal information with the consent of the data subject as follows, and the data subject can withdraw their consent at any time.
Category | Purpose of Collection and Use | Items Used | Classification | Retention and Usage Period |
|---|---|---|---|---|
Membership Registration, Service Usage Verification | User identification for service usage | ID, password, name, email, mobile phone number, SNS account information (Kakao, Naver, when signing up via an account), identity verification (CI/DI) | Required | Upon membership withdrawal: - If internal policy requires retention, stored for the necessary period - If required by relevant laws, stored for the period mandated by the law |
Membership Reservation | Contract fulfillment and service provision, identification for electronic financial services, prevention of illegal or fraudulent use | Reservation information (ID, name, mobile phone number, email, date of birth if necessary), reservation details (reservation date, payment amount, payment method, company, personnel information, special requests for companion registration if necessary), payment (for personal payment information, only transaction details provided by PG (payment gateway) companies that the company acquires and stores) | Required | Upon membership withdrawal: - If internal policy requires retention, stored for the necessary period - If required by relevant laws, stored for the period mandated by the law |
Information Collected During Service Usage | Prevention of fraudulent use and service improvement analysis, provision of personalized recommendation services based on user interests and application details | Recent access records, access IP information, cookies, purchase logs, event logs, transaction records, visit logs, interest stay and other service usage records | Required | Upon membership withdrawal: - If internal policy requires retention, stored for the necessary period - If required by relevant laws, stored for the period mandated by the law |
Membership Marketing | Collection, analysis, and provision of personalized services for promotions, events, benefits notifications, and marketing statistics | ID, name, email, mobile phone number | Optional | Until membership withdrawal or consent withdrawal: - If internal policy requires retention, stored for the necessary period - If required by relevant laws, stored for the period mandated by the law |
Customer Inquiries | Confirmation of identity and handling of customer inquiries, complaints, and dispute resolution | Name, ID, mobile phone number, email, inquiry details, and other necessary information | Required | 3 years after inquiry resolution: - If internal policy requires retention, stored for the necessary period - If required by relevant laws, stored for the period mandated by the law |
※ Regardless of the retention period specified for each collected information item, if compliance with legal obligations under relevant laws is required, or if an investigation or inquiry due to a violation of related laws is in progress, the data will be retained until the investigation or inquiry is completed.
※ In the process of using internet services, certain personal information may be automatically generated and collected (e.g., IP address, cookies, MAC address, service usage history, visit records, records of misuse, etc.).
Article 3 (Provision of Personal Information to Third Parties)
1. The company processes the personal information of data subjects only within the scope specified under 'Purpose of Personal Information Processing' and 'Collected Personal Information Items and Collection Methods'. The company does not provide personal information to third parties except in cases where the data subject has given consent, where special legal provisions apply, or when it falls under Articles 17 and 18 of the Personal Information Protection Act.
The company may provide personal information to third parties in the following cases:
① When separate consent has been obtained from the data subject.
② When required by special legal provisions or necessary to comply with legal obligations.
③ When the data subject or their legal representative is unable to express intent (e.g., due to unconsciousness) or when prior consent cannot be obtained due to an unknown address, and it is clearly necessary for the urgent protection of the life, body, or property of the data subject or a third party.
④ When the personal information must be used beyond its original purpose or provided to a third party to perform duties prescribed by other laws, subject to review and resolution by the Personal Information Protection Committee.
⑤ When necessary to provide personal information to foreign governments or international organizations for the implementation of treaties or other international agreements.
⑥ When required for criminal investigations, prosecution, or the maintenance of a public action.
⑦ When necessary for judicial proceedings by a court.
⑧ When required for the execution of a sentence, protective custody, or protective disposition.
2. The company may provide personal information to relevant authorities without the consent of the data subject in cases of emergencies, such as natural disasters, infectious diseases, imminent threats to life or physical safety, major accidents, or urgent financial losses. In such cases, the company will provide only the minimum necessary personal information based on applicable legal grounds and will not use the information for purposes beyond its intended scope.
Article 4 (Criteria for Additional Use and Provision of Personal Information)
1. Selectionist may use or provide personal information additionally without the data subject’s consent in accordance with Article 15(3) and Article 17(4) of the Personal Information Protection Act, considering the provisions of Article 14-2 of the Enforcement Decree of the Act.
2. In such cases, Selectionist has considered the following factors to ensure compliance with the law:
① Whether the additional use or provision of personal information is necessary to provide better services or realize equivalent positive value.
※ Especially when offering initial integrated benefits such as additional platform access rights.
② Whether the purpose of additional use or provision is related to the original collection purpose.
③ Whether the data subject could have reasonably expected the additional use or provision based on the circumstances of collection or general processing practices.
④ Whether the additional use or provision unfairly infringes on the interests of the data subject.
⑤ Whether appropriate security measures, such as pseudonymization or encryption, have been implemented to ensure safety.
3. If personal information is additionally used or provided under Paragraph 1, the company will notify the data subject and include it in the third-party consent provisions under Article 3.
Article 5 (Entrustment of Personal Information Processing)
1. Selectionist entrusts the processing of personal information as follows to provide more efficient and better services.
Entrusted Company | Delegated Tasks |
|---|---|
Toss Payments Co., Ltd. | Payment processing (credit card, bank transfer, account transfer, etc.) |
Naver Cloud Corp. | SMS, MMS message transmission and KakaoTalk notification service |
Amazon Web Services, Inc. | Database storage and infrastructure provision |
Channel Corporation (Channel Talk) | Customer support |
Nurikoo (Solapi) | KakaoTalk notification transmission |
2. When entering into an entrustment agreement, Selectionist specifies in contracts or documents the prohibition of processing personal information for purposes other than the entrusted tasks, technical and managerial protective measures, restrictions on re-entrustment, management and supervision of entrusted parties, and liability for damages, in accordance with Article 26 of the Personal Information Protection Act. The company also monitors whether the entrusted parties process personal information safely.
3. If there are changes in the details of entrusted tasks or the entrusted parties, the company will notify users through this policy.
Article 6 (Destruction of Personal Information)
1. Selectionist promptly destroys personal information when the retention period expires or when the processing purpose has been achieved, making the information unnecessary.
2. The procedure and method of destroying personal information are as follows:
① Destruction Procedure
Selectionist selects the personal information subject to destruction when a reason for destruction arises and destroys the personal information upon approval from the Personal Information Protection Officer.
② Destruction Method
- Personal information stored in electronic file formats is permanently deleted so that it cannot be recovered.
- Personal information recorded or stored on paper is shredded or incinerated.
3. Personal information may be retained if required by applicable laws.
Retained Information | Retention Period | Legal Basis |
|---|---|---|
Records related to contracts or subscription withdrawals | 5 years | Act on the Consumer Protection in Electronic Commerce |
Records related to payments and supply of goods or services | 5 years | Act on the Consumer Protection in Electronic Commerce |
Records related to consumer complaints or dispute resolution | 3 years | Act on the Consumer Protection in Electronic Commerce |
Records related to advertisements and promotions | 6 months | Act on the Consumer Protection in Electronic Commerce |
Website visit records | 3 months | Telecommunications Privacy Protection Act |
Records related to electronic financial transactions | 5 years | Electronic Financial Transactions Act |
Records related to identity verification and suspicious transactions | 5 years | Act on Reporting and Using Specified Financial Transaction Information |
4. If retention is necessary according to internal policies, the information will be retained until the notified period expires.
Article 7 (Collection of Personal Information via Cookies)
1. The company uses cookies to store and retrieve user information from time to time to provide personalized services.
2. Cookies are small amounts of data sent by the website's server (HTTP) to the user’s browser and stored on the user’s hard drive.
① Purpose of Using Cookies:
- Cookies are used to analyze users' visits and usage patterns of services and websites, track popular search terms, and check security access to provide optimized information to users.
② Installation, Operation, and Rejection of Cookies:
- Users can refuse cookie storage by adjusting their web browser settings via Tools > Internet Options > Privacy.
③ Disadvantages of Refusing Cookies:
- If users refuse to store cookies, personalized services may not function properly.
Article 8 (Rights and Obligations of Data Subjects and Their Legal Representatives, and Exercise Methods)
1. Data subjects have the right to exercise the following personal information protection rights at any time regarding Selectionist
- Request to access personal information
- Request correction if there are errors
- Request deletion
- Request suspension of processing
2. The exercise of rights under Paragraph 1 can be made via written request, email, or fax, in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and Selectionist will respond without delay.
3. The rights under Paragraph 1 may also be exercised through a legal representative or an authorized agent. In such cases, a power of attorney in accordance with Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
4. Requests for access or suspension of processing may be restricted under Article 35(5) and Article 37(2) of the Personal Information Protection Act.
5. If the data subject requests a correction or deletion due to errors in personal information, the company will not use or provide the relevant personal information until the correction or deletion is completed.
6. Selectionist verifies whether the person making the request for access, correction, deletion, or suspension is the data subject or an authorized representative.
7. If personal information is specified as a required collection item under other laws, its deletion cannot be requested.
Article 9 (Linked Websites)
Selectionist may provide links to other companies' websites or materials for users. However, as Selectionist has no control over external websites and materials, it does not take responsibility for nor guarantee the usefulness of services or materials provided by such external sources.
When users click on links included in Selectionist and navigate to an external website, the privacy policy of the new website will apply, which may differ from Selectionist’s privacy policy. Users are encouraged to review the privacy policy of the newly visited site.
Article 10 (Measures to Ensure the Security of Personal Information)
Selectionist implements the following measures to ensure the security of personal information:
1. Administrative Measures: Establishment and implementation of internal management plans, periodic review of relevant laws and policy changes.
2. Technical Measures: Encryption of personal information, technical countermeasures against hacking, access restrictions, storage and protection of access logs to prevent tampering.
3. Physical Measures: Use of locking devices for document security, controlled access to security documents.
Article 11 (Personal Information Protection Officer)
Selectionist is responsible for handling personal information matters and has designated a Personal Information Protection Officer to handle complaints and provide relief for data subjects. If you have any inquiries regarding personal information, please contact the following:
Personal Information Protection Officer
- Name: Jin-sil Lim
- Affiliation: Selectionist
- Email: spacepic@staybility.co.kr
Article 12 (Remedies for Infringement of Rights)
1. If a data subject seeks relief due to personal information infringement, they may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency’s Personal Information Infringement Report Center, or other relevant organizations. For further reports or consultations regarding personal information infringement, please contact the following institutions:
① Personal Information Dispute Mediation Committee: 1833-6972 ([www.kopico.go.kr](http://www.kopico.go.kr/))
② Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
③ Supreme Prosecutors’ Office Cybercrime Investigation Division: 1301 ([www.spo.go.kr](http://www.spo.go.kr/))
④ National Police Agency Cyber Bureau: 182 (ecrm.cyber.go.kr)
2. If a public institution’s decision or inaction regarding requests made under Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), or Article 37 (Suspension of Personal Information Processing) of the Personal Information Protection Act results in infringement of rights or interests, the affected person may file an administrative appeal in accordance with the Administrative Appeals Act.
▶ Central Administrative Appeals Commission: 110 ([www.simpan.go.kr](http://www.simpan.go.kr/))
Article 13 (Changes to the Privacy Policy)
This Privacy Policy will be effective from March 5, 2025.
Any additions, deletions, or revisions due to changes in relevant laws or company policies will be notified via public announcements at least seven (7) days before the changes take effect.