This personal information policy specifies the terms related to the management and handling of personal information of members or non-members (hereinafter referred to as “the Users”) using the websites of Asiana Airlines, Inc. (hereinafter referred to as Asiana Airlines ) including “flyasiana.com” and “dutyfree.flyasiana.com”.

Asiana Airlines is committed to protecting the rights and interests of its users by complying with the personal information protection regulations under the relevant laws and regulations, such as the Personal Information Protection Act, that information and communication service providers must comply with, and also to establishing a personal information processing policy in accordance with relevant laws.

1. Items of Personal Information and Method of Collection
A) Items of Personal Information Collected
Asiana Airlines collects the following personal information to enable membership services, customer responses and other services for the Users.
▷ Enrollment in Asiana Club
- Required Information: Korean/English Name, Date of birth, Gender, Phone number (Mobile Phone number), Email, Current Place of Residence, Connecting Information (CI), Self-Verification Number (i-PIN, My-PIN), Username, Password
- Optional Information: Name of company, Department, Position, Home Phone Number, Address, ZIP code
- Information Additionally Collected for Enrollment of Members below age 14: Name, Date of birth of guardian, E-Mail, relationship with the member, information on guardian's consent
▷ Registration to Family Mileage Plan of Asiana Club: Documents proving family relations
▷ SNS Login
- Required Information: Naver Authorization ID, Facebook Authorization ID, KakaoTalk Authorization ID, Google Authorization ID, Line Authorization ID, WeChat Authorization ID
▷ When using verification service(Kakao, Toss, Naver)
- Required Information: Account key(De-identified information), Name, Connection information(CI), Date of birth, Gender, Contact number, E-mail address
▷ Reservation of Flight Tickets
- Required Information: Name of passenger, Date of birth, Telephone number, E-mail address , Gender, Credit card payment information (credit card number and transaction authentication number), Account transfer information (name of bank and account number)
- Optional Information: Membership number, Passport information (passport number, date of expiry, place of issuance and nationality) – US (including Saipan and Guam), Some Europe routes required
▷When using auto check-in
- Required Information: Name, passport information (passport number, expiration date, issuer, nationality), date of birth, gender, contact information (telephone number or e-mail address)
▷ When using online check-in
- Required Information: Required Field: Name, passport information (passport number, expiration date, issuer, nationality), date of birth, gender
- Optional Information: telephone number or e-mail address
▷ Use of Customer Center
- Required Information: Name, Contact information, E-mail address
- Optional Information: Membership number, Boarding information, Date of birth, medical assistance, special In-flight meal
▷ Order of Duty-Free Goods
- Required Information: ID, Password, Membership number, English and korean name of a person who places the order, English and korean name of passenger, Date of birth, Contact information, E-mail address, Credit card number, Credit card authentication information, Passport information of passenger.
- Optional Information: In-flight duty free points information, Address to which the points reward and promotion gift will be delivered, Mileage information.
▷ Order of Logo goods(Mileage)
- Required Information: ID, Password, Mileage password, Contact information, Name of recipient, E-mail address, Delivery address
- Optional Information: Delivery message
▷ Participation in Events
- When it is necessary to collect additional personal information beyond what Asiana Airlines has collected at point of enrollment to participate in events, Asiana Airlines notifies users of the collection of additional personal information and obtains consent.
▷ Automatically collected records of usage of services
- Website and app browsing history, cookies, access IP information, operating system version and device model name (app)
▷ Joining Asiana Corporate Plus membership
- Required Information: Company name, Company registration number, Corporate registration number, Type of industry, Company Location, Company address, Number of workers, Name of CEO, Main phone number, ID, Password, Certified copy of corporate registration
- Optional Information : Industry, Number of workers, Annual Business trip budget, Main destinations, Corporate travel program in other airlines, How did you hear about us
▷ Registering fellow workers in Asiana Corporate Plus membership
- Required Information: Name, Membership number, E-mail address, Certificate of employment, Boarding information
- Optional Information: Department, Positon
▷ For usage of Mileage Mall (Excluding In-flight duty free and Logo Shop)
- Requirements: Membership Number, Password, Mileage Password, Phone number (Phone Number, Weekly Deal Affiliates only)
▷ When using Chatbot Service
- Required Information : Chat conversation contents, User Key
※ Additional personal information may be collected to participate in events, Asiana Airlines notifies users of the collection of additional personal information and obtains consent.
▷ Request for in-flight lost items shipping
- Required items: Name, Mobile phone, E-mail, Address
- Optional items: "Contents" to be filled out when requesting delivery

Sensitive personal information for use of the services
The information subject may provide Asiana Airlines with travel-related information that is considered sensitive personal information, such as medical conditions, wheelchair use, and religious dietary requests, in order to receive flight ticket discounts and services. This may result in situations where the health or religion of the service user can be inferred, and Asiana Airlines is committed to collecting and processing sensitive personal information only to the minimum extent necessary to provide services. If an information subject requests the processing of sensitive personal information, Asiana Airlines shall obtain the information subject’s explicit consent in accordance with applicable laws and regulations.

B) Method of Collection of Personal Information
Asiana Airlines collects personal information directly from the information subject when using Asiana Airlines’ services (such as membership registration, participating in events, or contacting the Customer Center) through the website, mobile site, social media, or mobile applications, and when using the services of other companies or agencies that perform work on behalf of Asiana Airlines Asiana Airlines also indirectly collects personal information about information subjects from other information subject controllers. (For example: reservation system providers, information provided to other airlines to book connecting flights, etc.) The camera feature in the mobile app is only used to recognize passports, baggage barcodes, and to implement augmented reality for customer convenience when using features such as check-in, baggage tracking, and nearby location. It is not stored or used as separate images.

2. Purpose of Collection and Use of Personal Information
A. Performance of the contract for services provision
Reservation and issuance of flight tickets, advance order of duty-free goods, provision of contents, ID authentication for financial transactions and financial services, in-flight lost items delivery service, etc.
B. Membership Management
Use of membership services, ID authentication, confirmation of intent to subscribe and processing of requests
C. Marketing and Advertising
Provision of information on new services, new products and events and statistics on service use

3. Disclosure of Personal Information
A. Asiana Airlines will not use the user’s personal information beyond the scope of the purpose of information use set forth in these rules, or provide any such information to a third party without the user’s prior consent, except in exceptional cases, such as those based on laws or related government policies, instructions, imminent life or bodily harm or property loss of the information subject or a third party, etc.
B. Asiana Airlines collects the personal information of members or discloses the personal information of members to a third party when given the consent of members. When members use the services of partners, a minimal amount of personal information of the members may be disclosed to the partners. Detailed terms are specified in the privacy policy of Asiana Club. >>Click to view

4. Entrustment of Management of Personal Information
Asiana Airlines entrusts the personal information of members as follows for better services, and defines the terms of entrustment of personal information management for the safe management of personal information in accordance with laws. The following organizations perform the following duties:
A. Organizations entrusted to manage information of Asiana Club
Organizations entrusted to manage information of Asiana Club comply with the privacy policy of Asiana Club >>Click to view

B. Organizations entrusted to manage services of Asiana websites

5. Terms of Retaining and Using Personal Information
A. Asiana Airlines holds and uses the personal information provided by the Users during the period in which the Users use the services of Asiana Airlines.
B. The term of retaining the personal information and the procedure of disposal of personal information followed by Asiana Airlines is determined in accordance with the privacy policy of Asiana Club. >>Click to view
C. Asiana Airlines disposes information which was maintained for a certain period of time in accordance with the applicable laws, including the Act on Consumer Protection in Electronic Commerce Transactions and etc.
- Records on contracts and withdrawal of subscription (term of maintenance: 5 years) : the Act on Consumer Protection in Electronic Commerce Transactions
- Records on payments and supply of goods (term of maintenance: 5 years) : the Act on Consumer Protection in Electronic Commerce Transactions
- Records on consumer complaints and disputes procedure (retention period: 3 years) : Consumer Protection Act in Electronic Commerce Transactions
- Records on visits to websites (term of maintenance: 3 months) : the protection of Communications Secrets Act
- Records on participation in events (term of maintenance: 1 year) : reasons for maintenance of information in accordance with the corporate policy
- Records on in-flight lost items delivery service (term of maintenance: 1 year) : reasons for maintenance of information in accordance with the corporate policy
- Other records maintained: until the purpose of collection and use of information is fulfilled
D. For Asiana's first online duty free shop purchase event and provision of benefits by membership level, the minimum information registered (name, member ID, total purchase amount) when purchasing duty-free products will be stored until membership withdrawal.
E. Notwithstanding the regulations of the previous Article, when there is a need to maintain the personal information in accordance with the applicable laws, including the Act on Consumer Protection in Electronic Commerce Transactions or when the purpose, period, and specific items of personal information are defined and notified to respond to legal disputes including litigation or settlement of charges, Asiana Airlines may maintain the personal information of the Users.

6. International Transmission of Personal Information
To fulfill the contract and to offer improved convenience to our customers, we outsource the processing of personal information overseas as follows.
Users may refuse the overseas transfer of their personal information through the applicable department or Customer Center. Should you refuse the overseas transfer of your personal information, we will exclude your personal information from being transferred overseas. However, in this case, the use of services that necessitate the overseas transfer of personal information may be restricted.

1) AMADEUS
A. Personal information transmitted to
- AMADEUS IT GROUP,S.A (dataprotection@amadeus.com)
B. Personal Information Transmitted
- Ticket reservation: membership number, passenger's name, date of birth, gender, phone number, e-mail address.
- Ticket reservation on Americas Routes: passport information (passport number, expiration date, issuing country, nationality)
- Purchasing: card number, expiration date, transaction approval number (credit card payments), transaction number (bank transfer payments)
- Enrollment or Change in Membership Information : Asiana Club membership number, membership status, expiration date of membership status, Korean and/or English name, date of birth, nationality, address, gender, phone number, e-mail address, available Miles, number of boarding and boarding miles within the previous 2 years
C. Country, Date and Method of International Transmission
- Reservation Information : Germany, Transmission upon completion of reservation, Transmission between Asiana Airlines and AMADEUS via a secured network
- Membership Information : Germany, When enrolling or changing information via a dedicated network
D. Purpose of Personal Information Use and Retention Period
- Reservation Information: Operation and maintenance of Asiana Airlines reservation system, up to 5 years after transmission
- Membership Information: Use of membership services and retention of personal information until the end of the contract term or withdrawal of membership

2) Google
A. Personal information transmitted to
- Google
B. Personal Information Transmitted
- When using online services: Cookies, IP information, access log
C. Country, Date and Method of International Transmission
- Log information: United States, when using online services, transmission via public network (security protocol processing)
D. Purpose of Personal Information Use and Retention Period
- Log information: Save log, 26 months after transfer of personal information
- Purpose of use: Homepage usage analysis via Google Analytics

3) Asiana Airlines in South Korea
A. Personal information transmitted to
- Asiana Airlines in South Korea (aadpo@flyasiana.com)
B. Personal Information Transmitted
▷ Enrollment in Asiana Club
- Required Information: Name (Korean and/or English spellings), Gender, Telephone number(Mobile Phone Number), E-mail address, Place of residence, ID authentication number, ID and Password
- Optional Information: Name of company, Department, Position, Home Phone Number, Address, ZIP code
- Information Additionally Collected for Enrollment of Members below age 14: The legal guardian's name, date of birth, and email address.
▷ Reservation of Flight Tickets
- Required Information: Name of passenger, Date of birth, Telephone number, E-mail address, Gender, Credit card payment information (credit card number and transaction authentication number), Account transfer information (name of bank and account number)
- Optional Information: Membership number, Passport information (passport number, date of expiry, place of issuance and nationality) – US (including Saipan and Guam), Some Europe routes required
▷ Use of Customer Center
- Required Information: Name, Contact information, E-mail address
- Optional Information: Membership number, Boarding information, Date of birth
▷ Order of Duty-Free Goods
- Required Information: ID, Password, Membership number, English and korean name of a person who places the order, English and korean name of passenger, Date of birth, Contact information, E-mail address, Credit card number, Credit card authentication information, Passport information of passenger.
- Optional Information: In-flight duty free points information, Address to which the points reward and promotion gift will be delivered, Mileage information.
▷ Registering fellow workers in Asiana Corporate Plus membership
- Required Information: Name, Membership number, E-mail address, Certificate of employment, Boarding information
- Optional Information: Department, Positon
C. Country, Date and Method of International Transmission
-South Korea, when registering as a member of the Asiana Club, transfer through a public network (processed through a security agreement)
-South Korea, when booking a flight, transfer through a public network (processed through a security protocol)
-South Korea, when using customer service centers, transfer through public networks (handled through security protocols)
-South Korea, when purchasing duty-free goods, transfer through public networks (processed through security agreements)
D. Purpose of Personal Information Use and Retention Period
- The purpose of using personal information of the receiving party:
A) Performance of the contract terms for provision of services
Reservation and issuance of flight tickets, advance order of duty-free goods, provision of contents, ID authentication for financial transactions and financial services
B) Member management
Use of membership services, ID authentication, confirmation of intention of subscription and processing of requests
- The recipient's personal information is held and used for:
A) Asiana Airlines holds and uses the personal information provided by the Users during the period in which the Users use the services of Asiana Airlines.
B) The term of retaining the personal information and the procedure of disposal of personal information followed by Asiana Airlines is determined in accordance with the privacy policy of Asiana Club.
C) Asiana Airlines maintains the records that it is mandated to maintain in accordance with the applicable laws, including the Act on Consumer Protection in Electronic Commerce Transactions, Etc., for a certain period of time, and then disposes of the information.
- Records on contracts and withdrawal of subscription (term of maintenance: 5 years) : the Act on Consumer Protection in Electronic Commerce Transactions
- Records on payments and supply of goods (term of maintenance: 5 years) : the Act on Consumer Protection in Electronic Commerce Transactions
- Records on consumer complaints and disputes procedure (retention period: 3 years) : Consumer Protection Act in Electronic Commerce Transactions
- Records on visits to websites (term of maintenance: 3 months) : the protection of Communications Secrets Act
- Records on participation in events (term of maintenance: 1 year) : reasons for maintenance of information in accordance with the corporate policy
- Other records maintained: until the purpose of collection and use of information is fulfilled
D) For Asiana's first online duty free shop purchase event and provision of benefits by membership level, the minimum information registered (name, member ID, total purchase amount) when purchasing duty-free products will be stored until membership withdrawal.

7. Method of Disposal of Personal Information
The personal information of Users is immediately disposed of after the purpose of its collection and use has been fulfilled. Personal information saved in a digital format is deleted by using technology that prevents the recovery of records.
A. Procedure of disposal
- Information entered by Users for enrollment or other purposes is disposed of for the protection of information in accordance with the corporate policy and other applicable laws after the purpose of its collection has been fulfilled.
- The above information, unless otherwise required by law, shall not be used for purposes other than the original purpose.
B. Method of disposal
- Personal information printed on paper is shredded or incinerated for disposal.
- Personal information saved in a digital format is deleted by using technology that prevents the recovery of records

8. Personal information rights and how to exercise them
8-1) Rights of information subjects and their legal representatives
A. The information subject may exercise the right to request Asiana Airlines to access, correct, delete, or suspend processing of personal information at any time. If such a request is made, Asiana Airlines will take the necessary measures without delay, after verifying whether it is the same person.
B. Information subjects and their legal representatives may view or modify their registered personal information at any time, and may request cancellation of their membership.
C. To view and modify your personal information, you can change or withdraw from the online platform MY ASIANA menu, or you can request it through the Asiana Club Center at 1588-8180.
D. The right to view personal information and request suspension of processing may be restricted in accordance with Article 35, Paragraph 4, and Article 37, Paragraph 2, of the Personal Information Protection Act. In addition, requests for correction or deletion of personal information cannot be made if other laws state that such personal information is subject to collection.

8-2) Personal information of children and rights of their legal representatives
A. Asiana Airlines shall obtain the consent of guardians when it collects the personal information of a child under age 14, discloses the collected information to a third party or uses the personal information for purposes other than the original purpose. Accordingly, a child under age 14 may register only when his or her guardian agrees with the terms of collection of the personal information of the child.
B. The guardian of a child under age 14 may request to view, correct, terminate or withdraw from the agreement in relation to the personal information of the child. Asiana Airlines, upon receiving such request, shall immediately take the necessary measures after authenticating the ID of the guardian.
C. The User or guardian may view or edit their own personal information or the personal information of the registered child under age 14. The User or guardian may also request the termination of membership.
D. The User or the child under age 14 may view or edit personal information via the My Asiana menu on the websites, or request to view or edit the personal information by calling Asiana Club Center (1588-8180). E. When a User has requested the correction of an error in personal information, the personal information shall not be used or disclosed until the correction is completed.

8-3) The rights of EU information subjects
The information subject may exercise the right not to be subject to automated decision-making, including information provision, access, correction, deletion (right to be forgotten), restriction of processing, transfer of personal information, objection, profiling, etc.

9. Provision of other personal information
A. In accordance with Article L 237 -7 of French Homeland Security Code, please be informed that air carriers may transmit reservation, checking and boarding data collected from their passengers (API / PNR) to the French national public services and competent authorities for the purposes and under conditions as defined in the Decree N° 2014-1095 dated 26/09/2014, modified by decree 2018/714 dated August 3rd 2018.
B. Domestic passengers must submit an aircraft arrival/departure report (GD). Accordingly, the passenger's gender, name, nationality, and date of birth will be provided to the government through the customs CIQ information sharing system.

10. Safety Measures for the Protection of Personal Information
Asiana Airlines takes the following technical, administrative, and physical measures to prevent the loss, theft, leakage, external attacks on and hacking of information, and aims to have the highest level of security in relation to the processing of the personal information of the Users.
A. Encryption of Personal Information
- The personal Information of users is secured using passwords, and all files and data transmitted are encrypted. Material data is protected using additional security functions.
- Asiana Airlines selects a security solution for the safe transmission of personal information, using the encryption algorithm.
B. Measures for the Hacking
- Asiana Airlines uses anti-virus solutions to prevent damages from PC viruses, and regularly updates the anti-virus programs.
- Asiana Airlines uses a security solution that blocks external attacks to prevent the leakage of personal information of the Users through hacking, and monitors for invasions around the clock by installing the invasion detection system.
C. Minimalization and Training of Personal Information Processing Manager
- The number of managers processing personal information of the Users is limited to the minimum level, and the managers are subject to continuous security training and monitoring of compliance with the personal information policy.
D. Operation of an organization exclusively for protecting Personal Information
- Through an internal organization exclusively for Personal Information protection, Asiana Airlines makes sure that the protection for Personal Information is implemented and the person in charge of it complies with the required policy. In the event that any issues are found, Asiana Airlines takes care of them right away."

11. Asiana Airlines' Cookie Policy
Asiana Airlines uses cookies to provide online services. Cookies are very small text files that are stored on your device when you visit our website. Cookies save data to provide a better user experience through a continual improvement of online services. They do not contain any information that would identify a person. By using this website, you consent to the use of cookies in accordance with our policy. If you would like see more information or to change the settings for cookies (which includes the option to reject the use of cookies), please check our Cookie Policy.

12. Processing of Suggestions and Complaints
Asiana Airlines enables Users to freely express opinions and raise complaints in relation to the protection of personal information. Suggestions or complaints submitted to the following contacts are immediately processed, and Users will be notified of the results.
▷ Websites: Customer Center ☞ Click
▷ Asiana Club Service Center: +82-2-2669-8180
▷ Online Duty-Free Shop: +82-2-2669-3434

13. Presence or absence of automated decisions
We do not classify all information subjects as automated decisions.

14. Administrators in Charge of Management of Personal Information of Websites
To protect your personal information, Asiana Airlines designates a Privacy Policy Officer as follows. Users may submit inquiries related to the protection of all personal information that occurred while using the Asiana Airlines' services, requests for access to information, and requests for deletion of information, to the privacy policy department. Asiana Club's responsibility to protect personal information is in accordance with the Asiana Club Privacy Policy.

For reports or consultations on infringements of privacy rights, please contact the following organizations:
- National Police Agency Cyber Investigation Bureau (ecrm.cyber.go.kr / call 182)
- Supreme Prosecutor's Office Republic of Korea(http://www.spo.go.kr/eng/index.jsp / call 1301)
- Korea Internet & Security Agency(privacy.kisa.or.kr / call 118)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972 )

15. Exceptions to the Application of the Personal Information Policy
Asiana Airlines may provide users with links to websites or materials of other companies through its websites. Asiana Airlines does not have control over external websites and materials, and thus the personal information policy of Asiana Airlines does not apply. Please check the personal information policy of any website you visit by clicking on a link included in an Asiana Airlines website.

16. Changes to the Privacy Policy
Modifications to this personal information policy will be announced 7 days before their application through the news section of the websites.

17. Miscellaneous
This personal information policy takes effect on November 21, 2001.

Date of official notice: Marh 13, 2024
Date of revision: March 20, 2024

This Personal Information Policy is based on that of the official Korean interpretation, and in the case of any discrepancy, the Korean interpretation will take precedence.