Privacy Policy

Home

Lotte Property&Development Inc.(hereinafter referred to as ‘the company’) abides by the relevant guideline and jurisdiction of personal information protection regulations such as 「Personal Information Protection Act」, 「Act on Promotion of Information and Communications Network Utilization and Information Protection」 and so on. The company also considers customers’ privacy important and does its best to protect the personal information the customers provide online while they use its services.

The company informs the customers the purposes and methods of using their personal information based on Privacy Policy and the measures it takes to protect their privacy.

The company encourages the customers to read this policy whenever they want by making it public on online services. If the Privacy Policy changed, it will be noticed on the services. This policy applies to Lotte Property&Development, Lotte World Tower & Mall, Workflex, SKY31 convention, Residence online services. The Privacy Policy can be changed due to the relevant guideline and jurisdiction of personal information protection regulations or the company’s internal policies.

[Indication of Major Personal Information (Labeling)]

Purpose of Personal Information Processing
Personal Information Retention Period
Personal Information Processing Items
Personal Information
personal video information
Outsourcing and Overseas Transfer of Personal Information Processing
Provision of Personal Information to Third Parties
Automatic Collection of Personal Information
Destruction of Personal Information
Rights and Obligations of the Information Subject
Measures to Ensure Safety
Personal Information Protection Manager
Relief for Infringement of Rights and Interests
Image Information Processing Device
Revision of Personal Information Processing Policy

Article1 (Purpose of Personal Information Processing)

The company collects personal information to provide various and convenient Internet services to customers.
The collected personal information will be used only for the following purposes and necessary measures will be implemented when changing the purpose of use.

A. Customer identification and response to customer inquiries
B. Contract signing and facility access card registration
C. Handling of complaints, prevention of illegal and unauthorized use of defective members
D. Event information guide
E. Delivery of goods
F. Survey
G. Confirmation of the consent of the legal representative when collecting personal information of children under the age of 14
H. Providing other services and information related to hosting competitions

Article2 (Personal Information Retention Period)

The company destroys personal information without delay when the purpose of collection is achieved.
However, in order to prevent the recurrence of illegal use of defective members, personal information may be preserved for three months after the termination of the use contract. Also, if it is necessary to preserve it according to the relevant laws, it shall be preserved for a certain period. In this case, the company uses personal information only for the purpose of storing it. In accordance with Article 15-2 of the Communications Secret Protection Act, the names, contact information, and e-mails necessary to provide communication fact-checking data shall be kept for 12 months.

개인정보의 처리 및 보유기간 내용에 관한 표
Category	Retention reason	Retention period
Lotte Property&Development website	Receiving internal complaints	1 year
	Receiving Voice of Partners inquiries	1 year
	Interworking L.POINT membership	Destroy immediately at the end of the session
LOTTE WORLD TOWER & MALL website	Receiving Voice of Customers inquiries	Destroy immediately when the purpose is achieved
	Receiving business inquiries	Destroy immediately when the purpose is achieved
	Receiving office workers membership applications	Until January 1 of the following year after withdrawing from office workers and L.POINT membership
	Receiving orders for waiting of the smart restaurant service	1 year
	Receiving orders for reservation of the smart restaurant service	1 year
	Receiving orders for to-go of the smart restaurant service	1 year
	Registering administrator accounts for the smart restaurant service	Destroy immediately upon withdrawal from membership
SKY31 convention website	Receiving inquiries	Destroy within 1 month of receipt of the inquiry
SKY31 convention website	Signing contracts	5 years (according to 「Act on Consumer Protection in the Electronic Commerce Transactions」)
workflex website	Receiving inquiries	Destroy within 1 month of receipt of the inquiry
	Signing contracts	5 years (according to 「Act on Consumer Protection in the Electronic Commerce Transactions」)
	Registering for the office access system	Destroy immediately when the purpose is achieved(within 1 month of contract expiration)
Common	Receiving customer complaints and disputes	3 years (according to 「Act on Consumer Protection in the Electronic Commerce Transactions」)
	Paying and Supplying of goods	5 years (according to 「Act on Consumer Protection in the Electronic Commerce Transactions」)
	Receiving surveys and event applications	Destroy immediately when the purpose is achieved(within 1 month of termination)

Article3 (Personal Information Processing Items)

The company collects and uses the following personal information to provide various and convenient Internet services to customers.

개인정보의 처리 및 보유기간 내용에 관한 표
Category	Contents	Required Information
Lotte Property&Development website	Receiving internal complaints	(Essential) name, phone number, e-mail address
	Receiving Voice of Partners inquiries	(Essential) name, phone number, e-mail address
	Interworking L.POINT membership	(Essential) name, ID, PW, Customer ID, phone number, CI
Lotte World Tower& Mall website	Receiving event applications	(Essential) name, gender, phone number, address, e-mail address, nationality(upon application of foreigners), blood type, history of disease, size of a top, the name of a legal representative(when children under the age of 14 participate)
	Receiving Voice of Customers inquiries	(Essential) name, phone number, e-mail address
	Receiving business inquiries	(Essential) name, phone number, e-mail address
	Receiving office workers membership applications	(Essential) CI, name, phone number, a picture of the business card
	Receiving orders for waiting of the smart restaurant service	(Essential) phone number
	Receiving orders for reservation of the smart restaurant service	(Essential) name, phone number
	Receiving orders for to-go of the smart restaurant service	(Essential) phone number
	Registering administrator accounts for the smart restaurant service	(Essential) name, phone number
SKY31 convention website	Receiving inquiries	(Essential) name, corporate name(when a person in charge of a corporation inquires), phone number, e-mail address, inquiry and contract history
SKY31 convention website	Signing contracts	(Essential) name, corporate registration number(when a person in charge of a corporation signs), birth date(when an individual signs), phone number, e-mail address
Workflex website	Receiving inquiries	(Essential) name, corporate name, e-mail address, phone number
Workflex website	Signing contracts	(Essential) name, address, phone number, birth date, e-mail address, corporate name

Article4 (Provision of Personal Information to Third Parties)

The company does not provide the customers’ personal information to third parties without notice.
However, except for followings.

A. When the customer agrees in advance
B. When a request is made by an investigative agency in accordance with the relevant guideline and jurisdiction of personal information protection regulations
C. When necessary for service charge
D. When necessary for the fulfillment of the contract
E. When there is sufficient grounds for disclosing the customer’s information in order to take legal action against it by causing mental and material damage to another person
F. When provided unidentifiably for statistics, marketing analysis and market research
G. When necessary for fulfillment of the contract related to services and extremely difficult to obtain normal consent due to economic or technical reasons

Article5 (Entrustment of Personal Information Processing)

The company entrusts some personal information processing tasks to external companies to provide services. In this case, necessary measures are taken to ensure that personal information is safely managed in accordance with relevant laws. The company entrusts and processes personal information to the minimum extent necessary for smooth service provision. In the event of a change of trustees and consignment work, disclosure will be made through this policy without delay. - The personal information processing consignees and purposes are as follows.

the purpose of consignment
Agent	Task	Retain and Use period
LOTTE Members, Inc	L.POINT Membership Operation	Destroy immediately upon withdrawal from membership
LOTTE Data Communication Company	Computing Systems Operation	Destroy immediately at the end of the contract
Daehong communications	Event Management	Destroy immediately at the end of the contract
LOTTE Shopping	Lotte World Mall Operation, Customer Contact Services(information desk, stroller rental, item storage)	Destroy immediately at the end of the contract
The man	Security service(parking)	1 year
S-Tec system	Security service(security)	1 year
Proscom	Security service(security)	1 year

Article6 (Destruction of Personal Information)

The Company will destroy the information without delay once the purpose of collecting and using personal information has been achieved. However, if it is required to be stored according to other related laws, the personal information is moved to a separate database or stored in another storage location. The destruction procedure and method are as follows.

A. Destruction procedure
- - The information entered at the time of the inquiry will be transferred to another DB (another document box in the case of paper) after the purpose has been achieved and destroyed after being stored for a certain period based on the internal policy and other information protection grounds according to related laws (retention and refer to usage period)
- - The personal information separately transferred to the DB will not be used for any other purpose other than the possession unless it is required by law.
B. Destruction method
- - The personal information output on paper is shredded by a shredder or destroyed through incineration.
- - Personal information stored in the form of electronic files will be deleted using technical methods that do not allow the recording to be replayed

Article7 (Automatic Collection of Personal Information)

The company uses cookies that stores information related to users and find it frequently. A cookie is a very small text file sent to the browser on users computer by the server used to operate the company's website and stored on users computer's hard disk.

A. Purpose of using cookie
- - Save selected research customization point choose by individual and used for configuration which the user requires.
B. How to reject setting cookies
- 1) How to set cookies (In case of using Explorer 9.0 or higher)
  Click Start> Control Panel> Internet Options. Click the "Personal Information" tab. Adjust the meter in "Settings" and set the level that allows cookies that suit users.
- 2) How to see received cookies (In case of using Explorer 9.0 or higher)
  Click Start> Control Panel> Internet Options. Click the General tab. Click the "Settings" button in "Search History". Click the “View File” button to confirm.
- 3) How to reject setting cookies (In case of using Explorer 9.0 or higher)
  Click Start> Control Panel> Internet Options. Click the "Personal Information" tab. Set the meter in "Settings" to a higher level and set it to "Block all cookies".

Article8 (Rights and Obligations of the Information Subject)

A. The information subject (user), the legal representative of a child under the age of 14, may exercise the rights related to personal information protection (request to view personal information, request correction if there is an error, request deletion, request suspension of processing) at any time, and the procedure is as follows.
- 1) Online members' personal information can be viewed, corrected, or deleted through the process, that is [lotteworld&mall Hompage] > [MyPage] > [profile(integration of L.POINT (http://www.lpoint.com))] and if a request is made to the person in charge of personal information management by e-mail or in writing, we will read, correct, or delete it after confirming the identity.
- 2) If the information subject (user) or the legal representative of a child under the age of 14 requests correction or deletion of an error in personal information, the company does not use or provide the personal information until the correction or deletion is completed.
B. Customer’s consent to the collection, use and provision of the personal Information through membership registration can be withdrawn at any time. To withdraw consent, click the "Membership Withdrawal Application" on the LPOINT site (http://www.lpoint.com) or contact the person in charge of personal information management in writing, phone call, or e-mail. And we will take necessary measures without delay, such as deleting your personal information. However, if the company needs to preserve the member's personal information according to the laws or the terms and conditions, the processing may be restricted. In this case, the member must reveal his or her ID and identification information for identification, and withdrawal may result in some restrictions on the service or unavailability of some services.
C. The exercise of rights pursuant to “A” can be done through an agent, such as a legal representative of the information subject or a person who has been delegated. In this case, the information subject(user) must submit a power of attorney in accordance with the form of Attachment No. 11 of the Enforcement Rules of the Personal Information Protection Act.
D. The information subject(user) has the right to have their personal information protected, as well as the duty to protect it themselves and not to infringe on other people's information.
- 1) The information subject(user) has responsible of the accidents caused by incorrect information entered by themselves and for problems when entering false information, such as stealing other people's information.
- 2) The information subject(user) should be careful not to damage the personal information of others, including posts, in accordance with the relevant laws and regulations so that personal information, including passwords, is not leaked.

Article9 (Measures to Ensure Safety)

The company considers following managerial, technical and physical measures to protect personal information from being lost, stolen, disclosed, distorted, or damaged when dealing with customer’s personal information.

A. Managerial Measures
- 1) Minimization and education of personal information handlers
  We limit the personal information handlers of the company to the minimum and take measures such as regular education for those who process personal information to make them aware of the importance of protecting personal information.
- 2) Formulation and implementation of internal control regulations
  We have formulated and implemented internal control regulations for the safe processing of personal information.
- 3) Perform regular self-audits
  In order to ensure the safety related to the processing of personal information, we carry out self-audits on a regular basis (once every six months)
B. Technical Measures
- 1) Encryption of personal information
  Personal information such as resident registration number, name, contact information, bank account number, credit card number, etc. provided by the customer is encrypted by a secure encryption algorithm and stored and managed.
- 2) Measures for hacking etc
  The company operates an intrusion prevention system 24 hours a day to prevent the leakage of customer's personal information due to intrusion of the company information communication network such as hacking, and personal confidential information is encrypted communication etc. Through this, personal information can be safely transferred over the network.
- 3) Storage of connection records and Preventing forgery • modulation
  We store and manage the records connected to the personal information system for over a year, and use security functions to prevent the connection records from being forged, altered, stolen or lost.
C. Physical Measures
- 1) Physical monitoring and blocking.
  We have set up data processing room, document storage room, etc. that store personal information in areas where access from the outside is controlled, and physically monitor and block them to control the entry and exit of unauthorized persons.

Article10 (Personal Information Protection Manager)

The company does its best to make sure customers can safely use its service. The customers can reports any kinds of complaints related to personal information protection of service to those managers below. The company will respond quickly and sincerely to them.

Managers in charge of Personal Information
	Chief Privacy Officer of Information Protection	Person in charge of Personal Information Protection	Person in charge of Personal Information Protection (Workflex)	Person in charge of Personal Information Protection (SKY31 Convention)	Person in charge of Personal Information Protection (Lotte Tower & Mall Web Service)	Person in charge of Personal Information Protection (Residence)	Person in charge of Personal Information Protection (Restaurant Services Admin Page)
Name	Kwang-Hee Son	Min-Kyu Ham	Beom-soo Youn	Seung-Chan Lee	So-Hyun Yu	Ji-Heon Chung	Seok-Ho Cha
Team	Information Security Division	Information Security Division	Shared Space	Shared Space	Marketing	Residence	Information Security Division
Position	Managing Director	Senior Assistant	Assistant	Assistant	Assistant	Manager	Assistant
Email
Telephone

Managers in charge of Personal Information
	Chief Privacy Officer of Information Protection	Person in charge of Personal Information Protection
Name	Kwang-Hee Son	Min-Kyu Ham
Team	Information Security Division	Information Security Division
Position	Managing Director	Senior Assistant
Email
Telephone

Managers in charge of Personal Information
	Person in charge of Personal Information Protection (Workflex)	Person in charge of Personal Information Protection (SKY31 Convention)
Name	Beom-soo Youn	Seung-Chan Lee
Team	Shared Space	Shared Space
Position	Assistant	Assistant
Email
Telephone

Managers in charge of Personal Information
	Person in charge of Personal Information Protection (Lotte Tower & Mall Web Service)	Person in charge of Personal Information Protection (Residence)
Name	So-Hyun Yu	Ji-Heon Chung
Team	Marketing	Residence
Position	Assistant	Manager
Email
Telephone

Managers in charge of Personal Information
	Person in charge of Personal Information Protection (Restaurant Services Admin Page)
Name	Seok-Ho Cha
Team	Information Security Division
Position	Assistant
Email
Telephone

Article11 (Relief for Infringement of Rights and Interests)

Customers can apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency, and Personal Information Infringement Reporting Center in order to receive relief from personal information infringement.
In addition, please refer to the organizations below when reporting or counseling are needed to resolve other Personal information violation problem

- Personal Information Violation Report Center (http://www.118.or.kr / 118)
- Personal Information Dispute Coordination Committee (http://www.kopico.go.kr / 1833-6972)
- Cyber-crime Investigation Division of Supreme Prosecutor’s Office (http://www.spo.go.kr / 1301)
- Cyber Crime Reporting System Police Agency (http://ecrm.cyber.go.kr / 182)

Article12 (Image Information Processing Device)

LOTTE P&D inform subject(user) of the purpose and method of the video through ‘Lotte Property&Development Inc Guidelines for closed circuit television’.