• home
  • GUIDE
  • PRIVACY POLICY

Privacy Policy

OHMC Co., Ltd., Orakai Songdo Park Hotel ("ORAKAI Hotel"), which operates ORAKAI Songdo Park, BW Premier Collection, considers the personal information of members using the songdo.orakaihotels.com website ("Website") to be extremely important, and makes every effort to ensure that all information you provide is thoroughly protected. Through this Privacy Policy, ORAKAI Songdo Park, BW Premier Collection informs you of how the personal information you provide is used and handled, as well as the measures taken to protect it.
The Website’s Privacy Policy contains the following:

1. Scope of Personal Information Collected

ORAKAI Hotel collects personal data fairly and legally.

② Collected information is categorized into required and optional items.

③ Only the minimum information necessary to provide services is collected. Sensitive personal data (e.g., race, religion, political opinions, health information, sexual life) is not collected.

2. Purpose of Processing Personal Information

Your personal information is processed only for the purposes listed below and will not be used for other purposes without obtaining separate consent as required by law:

① Website, Membership Management

·  Verify member intent

·  Identify and authenticate members

·  Manage membership status

·  Prevent misuse

·  Send notifications and results

·  Confirm identity for security purposes

② Provision of Goods or Services

·  Product delivery, service provision

·  Billing, invoicing, payment handling

·  Customized services

·  Identity and age verification

③ Handling Complaints

·  Confirm identity of complainant

·  Respond to inquiries

·  Communicate results of handling

3. Collection and Use of Personal Information

ORAKAI Hotel uses personal information collected through its Website, membership sign-up process, and promotional events to provide and develop more useful services for guests. Personal information is collected for the purposes shown in the table below.

Category Data Collected Purpose Method Retention
Room Booking Req. Name,
Contact number,
Email address,
Credit card details
·  Identity verification
·  Complaint/lost-and-found handling
·  Resolving hotel-use issues
·  Notices (Credit card used only for payment, not stored.)
Website,
Phone,
Email,
Fax,
Paper forms,
App,
Travel agent
5 years from expiry
Opt. Company name,
Department,
Position/title
For corporate-rate verification
Number of Guests Room-type assignment
Address Return-guest identification
Guest Registration Form Req. Name,
Address,
Date of birth,
Phone number,
Signature
·  Identity verification
·  Billing/payment
·  Post-service issue resolution (e.g., lost items)
Paper forms 5 years
Opt. Nationality,
Email Address
Identity verification for reservation and service use
Credit Card Information Billing/payment (used only at time of transaction; not stored)
Fitness Membership Req. Name,
Date of birth,
Address,
Company name,
Mobile number,
Gender,
Email,
address
Membership registration and reissuance; identity verification; billing and payment services; post-service complaint handling Paper forms Until purpose achieved or consent withdrawn
Opt. Department,
Job title
Identity verification related to service use
Credit Card Information Billing and payment services (used only at the time of payment and not stored)
Banquet reservation Banquet Membership Req. Name,
Gender,
Date of birth,
Mobile number,
Mailing address
Identity verification for membership services; provision of membership benefits; notification of policy changes and notices; handling inquiries and complaints; delivery of membership cards and brochures Phone,
Email,
Fax,
Paper forms
3 years after expiration
Opt. Company name,
Department,
Job title
Identity verification; statistical analysis of service use
Wedding anniversary Provision of membership benefits; statistical analysis
Credit card information Payment of membership fees and product purchases (used only at the time of payment and not stored)
Banquet Contract Req. Name,
Mobile number
Delivery of banquet-related notices; confirmation of banquet details; handling banquet-related issues Email,
Fax,
Paper forms
5 years
Opt. Nationality,
Company name,
Date of birth,
Address,
Email address
Provision of services based on demographic characteristics; statistical analysis; identity verification; personalized services
Partner Companies Req. Name,
Mobile number,
Event date
Identity verification and confirmation of event-related details for providing requested services Phone,
Email,
Fax,
Paper forms
1 years
Opt. Address Written verification related to service use
Advance Payment (Deposit) Req. Name,
Mobile number,
Event date
Confirmation of customer reservations Phone,
Email,
Fax
1 years
Deposit Refund Req. Name,
Mobile number,
Event date,
Bank account copy
Refund of deposit in case of event cancellation Deleted after completion of the event
Opt. Credit card information Credit card used as an alternative to deposit payment (used only at the time of payment and not stored)
Company name,
Department,
Job title
Used for deposit refund in case of event cancellation
Level 19 General Reservation Req. Name,
Mobile number
Handling customer inquiries, consultations, reservations and complaints; confirmation of reservation status Phone,
Email,
Paper forms
3 years
Deposit Refund Req. Name,
Mobile number,
Event date,
Bank account copy
Refund of deposit in case of event cancellation Phone,
Email,
Fax
Deleted after completion of the event
Opt. Credit Card Information Credit card used as an alternative to deposit payment (used only at the time of payment and not stored)
Company name,
Department,
Job title
Used for deposit refund in case of event cancellation

※ Automatically generated information may also be collected
(IP address, cookies, MAC address, service usage history, visit records, call recordings during consultations, etc.).

4. Period of Retention and Use

Personal information is kept only until its purpose is fulfilled, after which it is deleted.
Certain information may be retained for legally required periods (e.g., consumer-protection compliance) and used only for those legal purposes. Retention periods are listed below.

Category Records related to contract or withdrawal of offer Records related to consumer complaints or dispute resolution Website visit records
Legal basis for retention Act on Consumer Protection Act on Consumer Protection Protection of Communications Secrets Act
Retention period 5 years 3 years 3 months

5. Destruction of Personal Information

ORAKAI Hotel deletes personal information once it is no longer needed for its intended purpose. Destruction follows the procedures and deadlines below:

① Process

After the purpose is fulfilled (e.g., membership, reservation, service use), personal information may be stored temporarily according to internal policy and law. During this period, it is not used for any other purpose. It is then deleted.

② Timing

·  When the legal or internal retention period ends: deleted within 5 days

·  When the information is no longer needed due to fulfillment of purpose, service end, or business closure: deleted within 5 days of determination

③ Method

·  Paper documents: shredded or incinerated

·  Electronic files: permanently deleted using non-recoverable technical methods

6. Collection of Personal Information via Cookies

ORAKAI Hotel uses cookies so that the website can save and retrieve usage-related information, enabling more convenient and customized online services. Cookies identify a user’s browser and device, but do not personally identify the individual user on their own.

② Users may choose whether or not to allow cookies by adjusting browser settings, including:

·  Allowing all cookies

·  Receiving a prompt before cookies are saved

·  Refusing all cookies

- How to Manage Cookie Settings (e.g., in Internet Explorer: Tools > Internet Options > Privacy)

However, if you refuse cookie storage, you may be unable to use certain login-required services.

7. Protection of Children Under 14

ORAKAI Hotel does not intentionally collect the personal information of children under the age of 14.
If collection of such information becomes necessary in a specific situation, ORAKAI Hotel will comply with all applicable laws and regulations in doing so.

8. Entrusted Contractors and Their Service Related to Personal Information

ORAKAI Hotel entrusts certain tasks to specialized contractors for the maintenance and management of member services, customer consultation, and other service-related communications. The entrusted contractors are not permitted to use personal information beyond the intended purposes.
ORAKAI Hotel conducts regular supervision of these contractors to prevent any unlawful use of personal information. When outsourcing part of its operations, ORAKAI Hotel notifies members in advance. The following contractors have been entrusted with handling personal information.

Name of Contractor Entrusted Services
Sanha Information Technology Hotel PMS system maintenance and management

9. Rights of the Data Subject and How to Exercise Them

① You may exercise the following personal information protection rights with ORAKAI Hotel at any time:

·  Request access to your personal information

·  Request correction if there are errors or omissions

·  Request deletion

·  Request suspension of processing

② To exercise these rights under ①, you may submit a request in writing, by email, or by fax using Form No. 8 from the Personal Information Protection Act Enforcement Rule. ORAKAI Hotel will take action without delay.

③ If you request correction or deletion due to errors, ORAKAI Hotel will not use or provide that personal information until the correction or deletion is completed.

④ You may also exercise these rights through a legally authorized representative or agent. In that case, you must submit a power of attorney using Form No. 11 from the Personal Information Protection Act Enforcement Rule.

10. Measures to Ensure Personal Information Security

ORAKAI Hotel takes the following technical, managerial, and physical measures as required by Article 29 of the Personal Information Protection Act:

① Minimize personnel with access to personal information.

② Conduct regular education for staff handling personal information to improve awareness.

③ Perform regular internal inspections for stability of processing.

④ Establish and apply internal management plans for secure handling and management of personal information.

⑤ Personal information and passwords are encrypted in storage and managed securely. Separate security functions are used during transmission.

⑥ To prevent unauthorized access, viruses, and hacking, security programs are installed, regularly updated, and checked. Systems are placed in controlled areas with technical and physical monitoring.

⑦ Access to databases that process personal information is controlled through granting, changing, or deleting access rights. Intrusion prevention systems block unauthorized external access.

⑧ Access logs to personal-information systems are retained and managed for at least six months, with security measures to prevent tampering or loss.

⑨ Paper documents and auxiliary storage media containing personal information are stored in secure locations with locks.

⑩ Physical access control procedures are established and operated for areas where personal information is stored.

⑪ However, ORAKAI Hotel is not responsible for issues caused by user error or inherent internet risks.

11. Handling Complaints Related to Personal Information

① If you believe ORAKAI Hotel is not complying with this privacy policy, contact the privacy officer or the designated privacy contact below. ORAKAI Hotel will verify the issue immediately and take any necessary corrective action as quickly as possible.
ORAKAI Hotel has established all procedures and methods needed to receive and handle complaints about personal information.

② If you need to report or consult about personal information violations, you may contact the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center.
If you have suffered monetary or psychological damage due to personal information infringement, you may apply for relief through the Personal Information Dispute Mediation Committee. For other consultation needs, you may also contact KISA, the Supreme Prosecutors’ Office Cyber Investigation Division, or the National Police Agency Cyber Safety Bureau.

Report Centers:

·  Personal Information Infringement Report Center (KISA)

·  TEL: +82-118

·  URL: https://privacy.kisa.or.kr

·  Supreme Prosecutors’ Office Cyber Investigation Division

·  TEL: +82-1301

·  URL: www.spo.go.kr

·  National Police Agency Cyber Safety Bureau

·  TEL: +82-182

·  URL : https://cyberbureau.police.go.kr

12. Privacy Protection Officers

To protect members’ personal information and handle complaints, ORAKAI Hotel has appointed the following privacy officers. If you have inquiries related to personal information, contact the officer or responsible contact below. ORAKAI Hotel will respond promptly and sincerely.

Role Privacy Protection Officer Personal Information Handling Manager
Name So One-al Kong Ai-ri
Department Exec. Office Exec. Office
Phone +82-32-210-7070 +82-32-210-7502
Position General Manager Assistant Manager
Email oneal.so@orakaihotels.com songdopark.hrd@ohmckorea.com

※ For general inquiries, call the ORAKAI Songdo Park main number: +82-32-210-7000.

13. Notices Regarding Privacy Policy Changes

① This privacy policy is published on the homepage so that members can view it easily at any time.

② If there are additions, deletions, or revisions due to changes in law, policy, or security technology, the revised privacy policy will be posted on the homepage at least 30 days before implementation, explaining the reasons and changes. For other changes, notice of changes and reasons will be posted at least 1 week in advance.

③ This privacy policy may change at any time. Please review it each time you visit the homepage.


[Effective Date]
This privacy policy has been in effect since October 25, 2019.