Thetourlab (hereinafter referred to as the “Company”) places great importance on protecting users’ personal information and strives to ensure that the personal information provided by users online while using the Company’s services is safeguarded..
Accordingly, the Company complies with relevant personal information protection regulations stipulated in laws such as the Communications Privacy Protection Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization and Information Protection, as well as with the Personal Information Protection Guidelines established by the Ministry of Information and Communication.
Through its Privacy Policy, the Company informs users about how the personal information they provide is used and in what manner, as well as what measures are taken to protect their personal information.
The Company discloses its Privacy Policy on the homepage’s main screen so that users can easily view it at any time.
The Company’s Privacy Policy may be changed from time to time due to changes in government laws and guidelines or changes in the Company’s internal policies. The Company has established the necessary procedures for the continuous improvement of the Privacy Policy. In the event of any revisions or changes to the Privacy Policy, the Company will notify users through the Privacy Policy section on the first page of the website. Users are advised to check it frequently whenever they visit the site.
The company's privacy policy contains the following:
The company provides users with a procedure to click the "Agree" or "Cancel" button regarding the company's privacy policy or terms of use, and clicking the "Agree" button is considered consent to the collection of personal information.
"Personal information" refers to information about a living individual that can identify the individual by including details such as name or resident registration number, or can be easily combined with other information to identify the individual.
Most services can be used without separate user registration. However, to provide more customized and higher-quality services through member services, the company collects personal information of users. The company does not disclose personal information without prior consent and uses the collected information as follows.
First, we can develop more useful services based on the personal information provided by users.
When developing new services or expanding content, the company can more efficiently prioritize services based on the personal information provided by existing users. Furthermore, the company can rationally select and provide content that users need.
Second, the personal information items collected and the purposes of collection and use are as follows.
- - Name, ID, Password: Used for identity verification for membership services.
- - Gender, Date of Birth: Used to process travel service reservations.
- - Email address, Phone Number: Used to ensure smooth communication channels for notifications, complaint handling, and information on new services, products, and events.
- - Bank Account Information, Credit Card Information: Used to pay for services and additional services.
- - Other Optional Information: Data required to provide personalized services.
- - IP Address: Used to prevent fraudulent use by malicious members and unauthorized use.
The company collects essential information online when users register as members to use services.
- (1) When signing up as a member:
- a. One ID Login (SSO) process management service for Thetourlab and its affiliates
- b. Operation of membership management services for Trenble member companies
- c. General management of member levels and customer rewards
- d. Customer service performance
- e. Provision of member personal information requested by relevant organizations based on legal requirements
- ① Required fields: ID, password, name (Korean/English), email address, nickname, phone number, gender, date of birth
(1-1) When signing up via SNS- a. Google
- ① Required: Email, Name
- ② Optional: None
- b. Apple
- ① Required: None
- ② Optional: Email, Name
- c.Kakao
- ① Required: Name, Phone Number (Kakao Account), Gender, Date of Birth, Email (Kakao Account), Nickname
- ② Optional: KakaoTalk Channel Addition Status and History, KakaoTalk Messages
- d. Naver
- ① Required: Name, Phone Number, Gender, Date of Birth, Email
- ② Optional: Profile Photo
- (2) Service Provision Contract Performance and Service Fee Settlement
- a. Flight Ticket Reservation
- ① equired: Name (Korean/English), Date of Birth, Email, Phone Number
- ② Optional: None
- b. When reserving accommodations, golf, tours, tickets, or vehicles
- ① Required: Email address, name (Korean/English), email address, phone number
- ② Optional: Passport number, KakaoTalk ID, LINE ID, Korean address, emergency contact (name), departure date, flight number, pickup/drop-off location, date of birth, gender
- c. Payment
- ① Credit card: Card company name, card number, expiration date, etc.
- ② Refund account number: Bank name, account number, depositor name
- (3) Information that may be collected during service use and processing
- - Access IP information, cookie information, access log, service usage history, service usage history, cookie information, type of device
- (4) Mobile phone user verification
- - Name, phone number, gender, date of birth
Furthermore, during on-site surveys or events, we may selectively request personal information for statistical analysis or prize provision.
However, we do not collect sensitive personal information that may infringe upon users' fundamental human rights (such as race and ethnicity, ideology and beliefs, place of origin and residence, political affiliation and criminal record, health status, and sexual activity). If we must collect such information, we will obtain users' prior consent. Furthermore, under no circumstances will we use your information for any purpose other than those previously disclosed to you, and we will not disclose it to any external parties.
While users utilize the services provided by the company as site members, the company continuously retains their personal information and uses it to provide services..
However, if the user deletes or modifies their information directly, or requests account cancellation, as described in "6. Rights of Users and Legal Representatives," the company will completely delete the information from its disks using irreversible methods so that it cannot be viewed or used afterward..
Also, personal information collected temporarily (for surveys, events, identity verification, etc.) will be destroyed in the same way once the purpose is fulfilled.
As a principle, your personal information will be destroyed when the purpose of collection or provision has been achieved. However, to prevent fraudulent re-registration by bad members, the company may retain the resident registration number for one year after account termination.
In addition, if certain information needs to be preserved according to relevant laws such as the Commercial Act or the Act on Consumer Protection in Electronic Commerce, the company will retain the information for the period specified by law, using it only for that purpose.
- - Records on contracts or withdrawal of sub ion: 5 years
- - Records on payment and supply of goods: 5 years
- - Records on consumer complaints or dispute handling: 3 years
The company safely disposes of personal information to prevent leakage, using the following methods.
- - Personal information printed on paper is shredded or incinerated.
- - Personal information stored in electronic form is deleted using technical methods that make recovery impossible.
The company uses users’ personal information only within the scope notified in "2. Purpose of Collection and Use of Personal Information" and does not disclose it externally without the user's prior consent, except in the following cases.
- - When the user has agreed to the disclosure in advance
- - When necessary for fee settlement for service provision
- - When a user violates the website terms of use or other member service policies
- - When it is reasonably deemed necessary to disclose personal information to take legal action against users who cause damage to others using the company’s services
- - When required by law or requested by government/investigative authorities following legal procedures
- - When providing data to advertisers, partners, or research institutions for statistics, academic research, or market surveys in a form where individuals cannot be identified
- - When providing personal information to a professional customer service agency to handle complaints or inquiries from users
Users and their legal representatives may view or modify their own personal information or that of children under 14 at any time, and may request account termination.
To view or modify information, go to “Edit Member Information.” To terminate membership (withdraw consent), click “Delete Account” and go through the identity verification process. You may also contact the personal information protection officer in writing, by phone, or by email, and the company will promptly take action.
If you request correction of an error in your personal information, it will not be used or provided until the correction is completed. If incorrect information has already been provided to third parties, the company will notify them of the correction without delay.
Personal information deleted or terminated by request will be processed according to the retention and use period policy, and cannot be accessed or used for any other purpose.
The company uses cookies to store and retrieve user information to provide personalized services.
These cookies are automatically deleted when you log out, so if you use a shared or public computer, be sure to log out after use.
① Purpose of Cookies
We analyze access frequency and visit times of members and non-members, identify user preferences and interests, track user activity, and track event participation and visit frequency to provide targeted marketing and personalized services.
② How to Opt Out of Cookie Settings
You can select options in your web browser to allow all cookies, prompt you for confirmation each time a cookie is saved, or reject all cookies. However, if you reject cookie installation, you may experience difficulties accessing our services.
- Settings (IE): Tools > Internet Options > Privacy > Block Sites
Non-members can also purchase goods or services from the company.
Only essential personal information for payment and delivery is requested.
This information is used solely for payment and delivery purposes and not for any other use.
To improve our services, we may outsource the collection, handling, and management of your personal information to third parties, subject to legal requirements such as consent, if necessary. We may also provide your personal information to third parties.
We outsource the processing of personal information as described below, and stipulate the necessary provisions to ensure the safe management of personal information when entering into an outsourcing agreement in accordance with relevant laws and regulations. Furthermore, the information shared is limited to the minimum necessary to achieve the stated purpose.
Entrusted Party: KG Inicis Co., Ltd., NHN Korea Cyber Payment Co., Ltd., Naver Corporation, Kakao Corporation, eBay Korea Co., Ltd., NHN Payco Co., Ltd.
Entrusted Tasks: Card Payment and Real-Time Bank Transfer
Entrusted Party: Kakao Corporation, LG CNS Co., Ltd., Bada Information Co., Ltd.
Entrusted Tasks: SMS and Kakao Talk Notification
Entrusted Party: Humus On Co., Ltd.
Entrusted Tasks: Bulk Email Delivery
Entrusted Party: Dream Security Co., Ltd.
Entrusted Tasks: Provision of Mobile Phone Identity Verification Service
However, the following exceptions apply:.
- - When users have given prior consent; when required by law; or when requested by investigative authorities in accordance with procedures and methods prescribed by law for investigative purposes.
- - When entrusting or providing personal information, we will notify you in advance in writing, by email, by phone, or via our website regarding the entrustee, scope of entrustment, and scope of shared information.
1. Provision to third parties
To provide travel product reservation services, the company collects only essential information and does not use it for other purposes without consent. Information may be provided under limited conditions to related companies.
| Recipient | Items Provided | Purpose | Overseas Transfer | Retention Period |
|---|
| Flights | View All | Name, DOB, gender, contact, passport info, mileage info, payment info | Booking flights | Varies | Service period or legal retention |
| Accommodation | Hotels, resorts, partnersView All | Name, contact | Reservation/confirmation | Varies | Service period or legal retention |
| Golf | Golf clubs, partnersView All | Name, contact | Reservation/confirmation | Varies | Service period or legal retention |
| Tours (shows, spa, meals, tickets) | Tour operators, partnersView All | Name, contact | Reservation/confirmation | Varies | Service period or legal retention |
| Travel insurance | ACE Insurance, TourSafe | Name, DOB, gender, passport number | Insurance enrollment | No | 5 years |
2. Exceptions.
- When required by law or requested by government agencies for investigation
- When necessary for payment settlements
3. Right to Refuse
- You may refuse to consent to third-party provision or overseas transfers.
- However, refusal may make it impossible to book products that require such information.
We collect the minimum required information from customers to process travel product reservation services and other business processes. All personal information provided will not be used for any purpose other than the stated purpose without prior consent. Personal information will be provided under limited conditions to companies directly involved in providing customer service, as follows:
Personal information transferred: All data necessary for product reservations, including name, contact information, and email address.
Country where personal information will be provided: The country where the product or product supplier is located.
Transfer date and method: Transmitted via network or email upon product reservation.
Purpose of use: To provide services and communications, protect the rights, property, or safety of Travelble or others, and for purposes permitted by applicable laws.
Retention and use period: Retained until membership cancellation (except in cases where personal information must be retained pursuant to applicable laws)
n the following exceptional cases, personal information may be provided without customer consent.
- When requested by a relevant agency for investigative purposes in accordance with relevant laws and regulations, such as the Criminal Procedure Act, the Act on Real-Name Financial Transactions and Protection of Privacy, the Act on the Use and Protection of Credit Information, the Local Tax Act, the Consumer Protection Act, and the Bank When necessary for billing purposes related to the provision of services.
The company collects user opinions and has procedures to handle complaints regarding personal information. You may contact the Personal Information Protection Officer listed below by phone or email, and the company will respond promptly and sufficiently. |
The company designates the following officer responsible for personal information protection.
If an incident occurs that is contrary to the information provided to you regarding the protection of personal information, the Personal Information Manager will be held responsible.
- - Name / Position: Kim Younghwan / Director.
- - The company will never ask users for their passwords directly, so please take extra care to prevent your password from being leaked to others.
- - Be especially careful when accessing the internet in public places..
- - The company has designated a Personal Information Manager and a staff member responsible for handling personal information-related opinions and complaints. Their contact information is as follows.
- Korea
- Name / Position: Ji-eun Noh / Director.
- E-MAIL : minegallery@minegallery.co.kr
- 전 화 번 호 : 070-8998-2580
In accordance with Article 30 of the Enforcement Decree of the Personal Information Protection Act (Measures to Ensure the Security of Personal Information), the Company is taking the following measures to ensure security:
- - Regular Internal Audits
We conduct internal audits on a quarterly basis to ensure the security of personal information handling.
- - Minimizing and Training Personal Information Handling Staff
We designate and limit the number of employees handling personal information to those responsible for managing personal information.
- - Technical Measures Against Hacking
To prevent personal information leakage and damage due to hacking or computer viruses, the Company installs security programs and conducts periodic updates and inspections. The system is installed in an area with restricted external access and is monitored and blocked technically and physically.
- - Encryption of Personal Information
Users' personal information and passwords are stored and managed in encrypted form, ensuring that only the user has access to them. Important data is protected by separate security features, such as file and transmission data encryption and file locking.
- - Storage of Access Records and Prevention of Forgery and Alteration
We store and manage access records to our personal information processing system for at least six months, and employ security features to prevent forgery, alteration, theft, and loss of access records.
- - Restricted Access to Personal Information
We take necessary measures to control access to personal information by granting, modifying, and revoking access rights to the database system that processes personal information. We also use an intrusion prevention system to control unauthorized access from outside sources.
If the contents of this Personal Information Processing Policy are added, deleted, or modified due to changes in government policy or security technology, we will notify you through the 'Notices' section of the website.
Thetourlab (hereinafter referred to as the “Company”) places great importance on protecting users’ personal information and strives to ensure that the personal information provided by users online while using the Company’s services is safeguarded.
Accordingly, the Company complies with relevant personal information protection regulations stipulated in laws such as the Communications Privacy Protection Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization and Information Protection, as well as with the Personal Information Protection Guidelines established by the Ministry of Information and Communication.
Through its Privacy Policy, the Company informs users about how the personal information they provide is used and in what manner, as well as what measures are taken to protect their personal information.
The Company discloses its Privacy Policy on the homepage’s main screen so that users can easily view it at any time.
The Company’s Privacy Policy may be changed from time to time due to changes in government laws and guidelines or changes in the Company’s internal policies. The Company has established the necessary procedures for the continuous improvement of the Privacy Policy. In the event of any revisions or changes to the Privacy Policy, the Company will notify users through the Privacy Policy section on the first page of the website. Users are advised to check it frequently whenever they visit the site.
The company's privacy policy contains the following:
The company provides users with a procedure to click the "Agree" or "Cancel" button regarding the company's privacy policy or terms of use, and clicking the "Agree" button is considered consent to the collection of personal information.
"Personal information" refers to information about a living individual that can identify the individual by including details such as name or resident registration number, or can be easily combined with other information to identify the individual.
Most services can be used without separate user registration. However, to provide more customized and higher-quality services through member services, the company collects personal information of users. The company does not disclose personal information without prior consent and uses the collected information as follows.
First, we can develop more useful services based on the personal information provided by users.
When developing new services or expanding content, the company can more efficiently prioritize services based on the personal information provided by existing users. Furthermore, the company can rationally select and provide content that users need.
Second, the personal information items collected and the purposes of collection and use are as follows.
- - Name, ID, Password: Used for identity verification for membership services.
- - Gender, Date of Birth: Used to process travel service reservations.
- - Email address, Phone Number: Used to ensure smooth communication channels for notifications, complaint handling, and information on new services, products, and events.
- - Bank Account Information, Credit Card Information: Used to pay for services and additional services.
- - Other Optional Information: Data required to provide personalized services.
- - IP Address: Used to prevent fraudulent use by malicious members and unauthorized use.
The company collects essential information online when users register as members to use services.
- (1) When signing up as a member:
- a. One ID Login (SSO) process management service for Thetourlab and its affiliates
- b. Operation of membership management services for Trenble member companies
- c. General management of member levels and customer rewards
- d. Customer service performance
- e. Provision of member personal information requested by relevant organizations based on legal requirements
- ① Required fields: ID, password, name (Korean/English), email address, nickname, phone number, gender, date of birth
(1-1) When signing up via SNS- a. Google
- ① Required: Email, Name
- ② Optional: None
- b. Apple
- ① Required: None
- ② Optional: Email, Name
- c.Kakao
- ① Required: Name, Phone Number (Kakao Account), Gender, Date of Birth, Email (Kakao Account), Nickname
- ②Optional: KakaoTalk Channel Addition Status and History, KakaoTalk Messages
- d. Naver
- ① Required: Name, Phone Number, Gender, Date of Birth, Email
- ② Optional: Profile Photo
- (2) Service Provision Contract Performance and Service Fee Settlement
- a. Flight Ticket Reservation
- ① equired: Name (Korean/English), Date of Birth, Email, Phone Number
- ② Optional: None
- b. When reserving accommodations, golf, tours, tickets, or vehicles
- ① Required: Email address, name (Korean/English), email address, phone number
- ② Optional: Passport number, KakaoTalk ID, LINE ID, Korean address, emergency contact (name), departure date, flight number, pickup/drop-off location, date of birth, gender
- c. Payment
- ① Credit card: Card company name, card number, expiration date, etc.
- ② Refund account number: Bank name, account number, depositor name
- (3) Information that may be collected during service use and processing
- - Access IP information, cookie information, access log, service usage history, service usage history, cookie information, type of device
- (4) Mobile phone user verification
- - Name, phone number, gender, date of birth
Furthermore, during on-site surveys or events, we may selectively request personal information for statistical analysis or prize provision.
However, we do not collect sensitive personal information that may infringe upon users' fundamental human rights (such as race and ethnicity, ideology and beliefs, place of origin and residence, political affiliation and criminal record, health status, and sexual activity). If we must collect such information, we will obtain users' prior consent. Furthermore, under no circumstances will we use your information for any purpose other than those previously disclosed to you, and we will not disclose it to any external parties.
While users utilize the services provided by the company as site members, the company continuously retains their personal information and uses it to provide services.
However, if the user deletes or modifies their information directly, or requests account cancellation, as described in "6. Rights of Users and Legal Representatives," the company will completely delete the information from its disks using irreversible methods so that it cannot be viewed or used afterward.
Also, personal information collected temporarily (for surveys, events, identity verification, etc.) will be destroyed in the same way once the purpose is fulfilled.
As a principle, your personal information will be destroyed when the purpose of collection or provision has been achieved. However, to prevent fraudulent re-registration by bad members, the company may retain the resident registration number for one year after account termination.
In addition, if certain information needs to be preserved according to relevant laws such as the Commercial Act or the Act on Consumer Protection in Electronic Commerce, the company will retain the information for the period specified by law, using it only for that purpose.
- - Records on contracts or withdrawal of sub ion: 5 years
- - Records on payment and supply of goods: 5 years
- - Records on consumer complaints or dispute handling: 3 years
The company safely disposes of personal information to prevent leakage, using the following methods.
- - Personal information printed on paper is shredded or incinerated.
- - Personal information stored in electronic form is deleted using technical methods that make recovery impossible.
The company uses users’ personal information only within the scope notified in "2. Purpose of Collection and Use of Personal Information" and does not disclose it externally without the user's prior consent, except in the following cases.
- - When the user has agreed to the disclosure in advance
- - When necessary for fee settlement for service provision
- - When a user violates the website terms of use or other member service policies
- - When it is reasonably deemed necessary to disclose personal information to take legal action against users who cause damage to others using the company’s services
- - When required by law or requested by government/investigative authorities following legal procedures
- - Providing personal information to advertisers, partners, or research organizations in a form that does not identify specific individuals for statistical compilation, academic research, or market research.
- - Providing personal information to handle complaints and inquiries (civil complaints) related to user service use.
- - Providing personal information necessary for handling civil complaints to a specialized company operating a customer service center.
Users and their legal representatives may view or modify their own personal information or that of children under 14 at any time, and may request account termination.
To view or modify information, go to “Edit Member Information.” To terminate membership (withdraw consent), click “Delete Account” and go through the identity verification process. You may also contact the personal information protection officer in writing, by phone, or by email, and the company will promptly take action.
If you request correction of an error in your personal information, it will not be used or provided until the correction is completed. If incorrect information has already been provided to third parties, the company will notify them of the correction without delay.
Personal information deleted or terminated by request will be processed according to the retention and use period policy, and cannot be accessed or used for any other purpose.
The company uses cookies to store and retrieve user information to provide personalized services.
These cookies are automatically deleted when you log out, so if you use a shared or public computer, be sure to log out after use.
① Purpose of Cookies
You can select options in your web browser to allow all cookies, prompt you for confirmation each time a cookie is saved, or reject all cookies. However, if you reject cookie installation, you may experience difficulties accessing our services.
② How to Opt Out of Cookie Settings
회원님이 사용하시는 웹 브라우저의 옵션을 선택함으로써 모든 쿠키를 허용하거나 쿠키를 저장할 때마다 확인을 거치거나, 모든 쿠키의 저장을 거부할 수 있습니다. 단, 쿠키 설치를 거부하였을 경우 서비스 제공에 어려움이 있을 수 있습니다.
- Settings (IE): Tools > Internet Options > Privacy > Block Sites
Non-members can also purchase goods or services from the company.
Only essential personal information for payment and delivery is requested.
This information is used solely for payment and delivery purposes and not for any other use.
To improve our services, we may outsource the collection, handling, and management of your personal information to third parties, subject to legal requirements such as consent, if necessary. We may also provide your personal information to third parties.
We outsource the processing of personal information as described below, and stipulate the necessary provisions to ensure the safe management of personal information when entering into an outsourcing agreement in accordance with relevant laws and regulations. Furthermore, the information shared is limited to the minimum necessary to achieve the stated purpose.
Entrusted Party: KG Inicis Co., Ltd., NHN Korea Cyber Payment Co., Ltd., Naver Corporation, Kakao Corporation, eBay Korea Co., Ltd., NHN Payco Co., Ltd.
Entrusted Tasks: Card Payment and Real-Time Bank Transfer
Entrusted Party: Kakao Corporation, LG CNS Co., Ltd., Bada Information Co., Ltd.
Entrusted Tasks: SMS and Kakao Talk Notification
Entrusted Party: Humus On Co., Ltd.
Entrusted Tasks: Bulk Email Delivery
Entrusted Party: Dream Security Co., Ltd.
Entrusted Tasks: Provision of Mobile Phone Identity Verification Service
However, the following exceptions apply:.
- - When users have given prior consent; when required by law; or when requested by investigative authorities in accordance with procedures and methods prescribed by law for investigative purposes.
- - When entrusting or providing personal information, we will notify you in advance in writing, by email, by phone, or via our website regarding the entrustee, scope of entrustment, and scope of shared information.
1. Provision to third parties
To provide travel product reservation services, the company collects only essential information and does not use it for other purposes without consent. Information may be provided under limited conditions to related companies.
| Recipient | Items Provided | Purpose | Overseas Transfer | Retention Period |
|---|
| Flights | View All | Name, DOB, gender, contact, passport info, mileage info, payment info | Booking flights | Varies | Service period or legal retention |
| Accommodation | Hotels, resorts, partners View All | Name, contact | Reservation/confirmation | Varies | Service period or legal retention |
| Golf | Golf clubs, partners View All | Name, contact | Reservation/confirmation | Varies | Service period or legal retention |
| Tours (shows, spa, meals, tickets) | Tour operators, partners View All | Name, contact | Reservation/confirmation | Varies | Service period or legal retention |
| Travel insurance | ACE Insurance, TourSafe | Name, DOB, gender, passport number | Insurance enrollment | No | 5 years |
2. Exceptions.
- When required by law or requested by government agencies for investigation
- When necessary for payment settlements
3. Right to Refuse
- You may refuse to consent to third-party provision or overseas transfers.
- However, refusal may make it impossible to book products that require such information.
We collect the minimum required information from customers to process travel product reservation services and other business processes. All personal information provided will not be used for any purpose other than the stated purpose without prior consent. Personal information will be provided under limited conditions to companies directly involved in providing customer service, as follows:
Personal information transferred: All data necessary for product reservations, including name, contact information, and email address.
Country where personal information will be provided: The country where the product or product supplier is located.
Transfer date and method: Transmitted via network or email upon product reservation.
Purpose of use: To provide services and communications, protect the rights, property, or safety of Travelble or others, and for purposes permitted by applicable laws.
Retention and use period: Retained until membership cancellation (except in cases where personal information must be retained pursuant to applicable laws)
The following exceptional cases, personal information may be provided without customer consent.
- When requested by a relevant agency for investigative purposes in accordance with relevant laws and regulations, such as the Criminal Procedure Act, the Act on Real-Name Financial Transactions and Protection of Privacy, the Act on the Use and Protection of Credit Information, the Local Tax Act, the Consumer Protection Act, and the Bank When necessary for billing purposes related to the provision of services.
The company designates the following officer responsible for personal information protection.
If an incident occurs that is contrary to the information provided to you regarding the protection of personal information, the Personal Information Manager will be held responsible.
- - Name / Position: Kim Younghwan / Director.
- - The company will never ask users for their passwords directly, so please take extra care to prevent your password from being leaked to others.
- - Be especially careful when accessing the internet in public places..
- - The company has designated a Personal Information Manager and a staff member responsible for handling personal information-related opinions and complaints. Their contact information is as follows.
- Thailand
- Name / Position: Kim Young-hwan / Director.
- E-MAIL : director@thetourlab.com
- Phone number : 084-073-1020
In accordance with Article 30 of the Enforcement Decree of the Personal Information Protection Act (Measures to Ensure the Security of Personal Information), the Company is taking the following measures to ensure security:
- - Regular Internal Audits
We conduct internal audits on a quarterly basis to ensure the security of personal information handling.
- - Minimizing and Training Personal Information Handling Staff
We designate and limit the number of employees handling personal information to those responsible for managing personal information.
- - Technical Measures Against Hacking
To prevent personal information leakage and damage due to hacking or computer viruses, the Company installs security programs and conducts periodic updates and inspections. The system is installed in an area with restricted external access and is monitored and blocked technically and physically.
- - Encryption of Personal Information
Users' personal information and passwords are stored and managed in encrypted form, ensuring that only the user has access to them. Important data is protected by separate security features, such as file and transmission data encryption and file locking.
- - Storage of Access Records and Prevention of Forgery and Alteration
We store and manage access records to our personal information processing system for at least six months, and employ security features to prevent forgery, alteration, theft, and loss of access records.
- - Restricted Access to Personal Information
We take necessary measures to control access to personal information by granting, modifying, and revoking access rights to the database system that processes personal information. We also use an intrusion prevention system to control unauthorized access from outside sources.
If the contents of this Personal Information Processing Policy are added, deleted, or modified due to changes in government policy or security technology, we will notify you through the 'Notices' section of the website.