COLLECTING PERSONAL DATA

Korean Air processes the following types of Personal Data:

1. When using “Voice Of Customer” or “Online Claim” menu for non-members
• Data Subjects will be required to provide the following Personal Data to receive customer service from the “Voice Of Customer” menu.

- Name, phone number, email, location

• Data Subjects will be required to provide the following Personal Data for “Online Claim” registration service.

- Company name, company location (country, city), name, phone number, email

2. Automatically Generated Information
In addition, the following Personal Data may be collected during the use of various services and as part of Personal Data processing.
• Service records, access log, cookie, IP Address, etc.

PURPOSE AND LEGAL BASIS FOR COLLECTING PERSONAL DATA

When processing Data Subject’s Personal Data, Korean Air mainly relies on the following legal basis:

• processing is necessary for the performance of a contract to which the Data Subject is a party;

- Relevant Purposes : Cargo acceptance, notification and delivery.
- Categories of personal data : shipper/consignee name, address, phone number, e-mail address.

• processing is necessary for compliance with a legal obligation to which Korean Air is subject;

- Relevant Purposes : customs declaration.
- Categories of personal data : shipper/consignee name, address, phone number.

• The Data Subject has given consent to the processing of his Personal Data for one or more specific purposes.

- Relevant Purposes : feedback for inquiry/suggestion/complaint.
- Categories of personal data : name, e-mail address, phone number.

Korean Air processes Personal Data for the purposes listed below:

When using Korean Air’s call centre, airport stations, or branch offices

• Performance of a contract: as part of the contractual relationship between Korean Air and the Data Subject, Personal Data processing may be carried out for the following purposes:

- Services rendered: Providing contents, booking, tracing the shipment, displaying invoices, etc.
- Data Subject management: Data Subject identification, prevention of membership abuse and unlicensed use of service, confirmation of membership registration, regulating membership registration, customer service, and announcements.

• Legitimate interest of Korean Air

- Pre-litigation and litigation: maintaining records for disputes resolution purposes.
- Marketing and advertising: Notices about new services, promotional events and information.

• Performance of a contract: as part of the contractual relationship between Korean Air and the Data Subject, Personal Data processing may be carried out for the following purposes:

- Services rendered and payment: cargo receipt, import cargo information search, receipt and transportation of live animals and special shipments.
- Data Subject management: user identification, customer service, and announcements.

TERMS & DURATION OF PERSONAL DATA

Korean Air will destroy and erase Personal Data as follows:

• Membership information: Upon termination of membership.
• Information collected temporarily for surveys or events: When the applicable survey or event expires.

However, Korean Air may retain all or any applicable part of Personal Data after its purpose has been served for the following period when required by law or related regulations regarding consumer protection. In this case, Korean Air will retain Personal Data solely for the purpose of preservation and maintenance.

• By Korean law on the consumer protection in the online business transactions

- Record of advertising and so on: six months.
- Record of contract, agreement, and withdraw: five years
- Record of payments and supplies: five years
- Record of consumer complaints and disputes: three years

• By Korean communication secret protection law

- Records regarding the website visits : three months

DISCLOSURE OF PERSONAL DATA