Privacy policy

Privacy policy

Raon Holdings (brand name TripRAON, hereinafter referred to as the "Company") places great importance on the protection of users' personal information and is doing its best to ensure that personal information provided to the Company online by users while using the Company's services is protected.

Accordingly, the Company complies with personal information protection regulations under relevant laws that information and communications service providers must observe, such as the Protection of Communications Secrets Act, the Telecommunications Business Act, and the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc., as well as the Personal Information Protection Guidelines established by the Ministry of Information and Communication.

Through its Privacy Policy, the Company informs users of the purpose and manner in which the personal information they provide is used, and what measures are being taken to protect their personal information.

The company takes measures to ensure that users can easily view its privacy policy at any time by disclosing it on the first screen of the homepage.

The Company's Privacy Policy may be amended from time to time due to changes in government laws and guidelines or internal company policies, and procedures necessary for the continuous improvement of the Privacy Policy are established accordingly. Furthermore, in the event of an amendment or change to the Privacy Policy, notice is provided through the Privacy Policy link on the homepage of the site. Users are advised to check this frequently when visiting the site.

The company's privacy policy contains the following information.

1. Consent to the Collection of Personal Information

2. Purpose of Collection and Use of Personal Information

3. Items of Personal Information Collected and Methods of Collection

4. Retention and Usage Period of Collected Personal Information

5. Sharing and Provision of Collected Personal Information

6. Rights of Users and Legal Representatives and Methods of Exercising Them

7. Matters concerning the operation of cookies

8. Management of personal information for non-member customers

9. Outsourcing of Personal Information Processing

10. Guide to Third-Party Provision and Sharing of Personal Information

11. Information on Sharing Personal Information Regarding International Transfer and Third-Party Provision

12. Matters concerning the collection of opinions and handling of complaints regarding personal information

13. Matters concerning the use of web analytics tools (Google Analytics)

13. Affiliation, Name, and Contact Information of the Personal Information Management Officer and Person in Charge

14. Measures to Ensure the Safety of Personal Information

15. Duty of Disclosure

1. Consent to the Collection of Personal Information

The company provides a procedure for users to click an "Agree" button or a "Cancel" button regarding the contents of the company's personal information processing policy or terms of use, and if the "Agree" button is clicked, it is deemed that the user has consented to the collection of personal information.

2. Purpose of Collection and Use of Personal Information

“Personal information” means information relating to a living individual that can identify the individual through details such as name and resident registration number included in the information (including information that, even if it cannot identify a specific individual on its own, can be easily combined with other information to identify the individual).

Most services can be used at any time without separate user registration. However, the Company collects users' personal information through membership services to provide users with enhanced, high-quality services, including customized services. The Company does not disclose users' personal information without their prior consent, and the collected information is used as follows.

First, we can develop more useful services based on the personal information provided by users.

When developing new services or expanding content, the Company can more efficiently determine the priority of services to be developed based on personal information provided to the Company by existing users, and the Company can reasonably select and provide content that users will need.

Second, the items of personal information collected and the purposes of collection and use are as follows.

– Name, ID, Password: Used for identity verification procedures for using membership services

– Gender, Date of Birth: Used for travel service reservation processing

– Email address, phone number: To secure a smooth communication channel for delivering notices and handling complaints, and to provide information on new services, products, or events.

– Bank account information, credit card information: Payment of fees for services and additional services

– Other optional items: Data for providing personalized services

– IP Address: Prevention of fraudulent use by malicious users and prevention of unauthorized use

3. Items of Personal Information Collected and Methods of Collection

The company receives essential information for providing services online when users sign up as members to use the membership services.

(1) When signing up for membership

A. One ID Log-in (SSO) Process Management Service for TripRAON and Affiliates

B. Operation of member management services by TripRAON member companies

C. Overall management of membership levels and customer rewards

D. Performance of customer consultation duties

E. Provision of members' personal information requested by relevant authorities based on lawful laws and regulations

① Required items: ID, password, name (Korean/English), email, nickname, phone number, gender, date of birth

(1-1) When signing up for SNS

A. Google

① Required items: Email, Name

② Selected Item: None

B. Apple

① Required items: None

② Optional items: Email, Name

C. Kakao

① Required items: Name, Phone number (Kakao Account), Gender, Date of birth, Email (Kakao Account), Nickname

② Selectable Items: KakaoTalk Channel Addition Status and History, Send KakaoTalk Messages

D. Naver

① Required items: Name, phone number, gender, date of birth, email

② Optional: Profile Picture

(2) Fulfillment of contract regarding service provision and settlement of charges for service provision

A. Flight Reservation

① Required items: Name (Korean/English), Date of Birth, Email, Phone Number

② Selected Item: None

B. When booking accommodation, golf, tours, tickets, or vehicles

① Required items: Email, Name (Korean/English), Email, Phone number

② Optional items: Passport number, KakaoTalk ID, LINE ID, Address in Korea, Emergency contact number, Departure date, Flight number, Pickup/drop-off location, Date of birth, Gender

C. When making a payment

① Credit Card: Card issuer name, card number, expiration date, etc.

② Account number for refund: Bank name, account number, account holder name

(3) Information that may be collected during the use and processing of the service

– Connection IP information, cookie information, connection logs, service usage records, service usage records, cookie information, types of connected devices

(4) When verifying identity via mobile phone

– Name, phone number, gender, date of birth

In addition, we may selectively request the input of personal information for statistical analysis or prize provision during surveys or events on the site.

However, we do not collect sensitive personal information that may infringe upon users' fundamental human rights (such as race and ethnicity, ideology and creed, place of origin and domicile, political orientation and criminal records, health status and sexual life, etc.). If it is unavoidable to collect such information, we will必ず obtain the prior consent of users. Furthermore, under no circumstances will we use the information you provide for any purpose other than those disclosed to you in advance, nor will we leak it externally.

4. Retention and Use Period of Collected Personal Information

While the user utilizes the services provided by the Company as a site member, the Company continuously retains the user's personal information and uses it for the provision of services, etc.

However, in accordance with the procedures and methods described in “6. Matters concerning the management of the user’s own personal information (viewing, correction, deletion, etc.)” below, information that the member has directly deleted or modified, or information for which a membership cancellation has been requested, will be completely deleted from the disk using a method that makes it impossible to recover, and will be processed in a state where it cannot be viewed or used in the future.

Furthermore, as stated in “3. Items of Personal Information Collected and Collection Methods,” personal information received for temporary purposes (surveys, events, identity verification, etc.) is processed in a way that makes it impossible to reproduce it subsequently using the same method once the purpose has been achieved.

In principle, your personal information will be destroyed once the purpose of its collection or provision has been achieved, as follows. However, in order to prevent the recurrence of fraudulent use by delinquent members, the Company may retain the member's resident registration number for one year from the date of termination of the service agreement.

In addition, if preservation is required pursuant to the provisions of relevant laws, such as the Commercial Act and the Act on the Consumer Protection in Electronic Commerce, etc., the Company retains member information for a specific period prescribed by such laws. In this case, the Company uses the retained information solely for the purpose of retention, and the retention period is as follows.

– Records regarding contracts or withdrawal of subscription, etc.: 5 years

– Records regarding payment settlement and supply of goods, etc.: 5 years

– Records regarding consumer complaints or dispute resolution: 3 years

The Company safely handles the valuable personal information of its members and destroys personal information through the following methods to prevent leakage.

– Personal information printed on paper is destroyed by shredding or incineration.

– Personal information stored in the form of electronic files is deleted using technical methods that make it impossible to reproduce the records.

5. Sharing and Provision of Collected Personal Information

The Company uses users' personal information within the scope notified in “2. Purpose of Collection and Use of Personal Information,” and, in principle, does not use it beyond said scope or disclose users' personal information externally without the user’s prior consent. However, the following cases are exceptions:.

– Cases where users have consented to disclosure in advance

– When necessary for the settlement of charges related to the provision of services

– In the event of a violation of the Terms of Service posted on the website or other terms of service or operating principles for member services, etc.

– Where there are sufficient grounds to believe that personal information must be disclosed in order to take legal action against a person who has caused mental or material harm to others through the use of our services

– Cases where it is deemed in good faith to be required by other laws (e.g., when there is a request from a government/investigative agency through lawful procedures in accordance with relevant laws, etc.)

– Cases where data is provided to advertisers, partners, or research organizations, etc., in a form that cannot identify specific individuals for the purpose of compiling statistics, academic research, or market research

– For the processing of complaints and inquiries (civil complaints) regarding the user's use of the service, Paragraph P.

– In cases where personal information necessary for the processing of the complaint is provided to a specialized company operating a customer center

6. Rights of Users and Legal Representatives and Methods of Exercising Them

Users and legal representatives may at any time view or modify their own registered personal information or that of the child under the age of 14, and may also request cancellation of membership.

To view or modify the personal information of a user or a child under the age of 14, please click "Edit Member Information." To cancel membership (withdraw consent), please click "Withdraw Membership." After completing the identity verification process, you can directly view, correct, or withdraw your information. Alternatively, if you contact the Chief Privacy Officer in writing, by phone, or by email, we will take action without delay.

If you request the correction of errors in your personal information, we will not use or provide the relevant personal information until the correction is completed.

In addition, if incorrect personal information has already been provided to a third party, we will notify the third party of the correction results without delay to ensure that the correction is made.

The Company processes personal information that has been terminated or deleted at the request of a user or their legal representative in accordance with the retention and usage period specified for the personal information collected by the Company, and ensures that it cannot be accessed or used for any other purpose.

7. Matters concerning the operation of cookies

We use 'cookies' that store and retrieve user information from time to time to authenticate members and provide personalized and customized services to individual members.

Since this data is automatically deleted from the computer upon logout, please be sure to log out after you have finished using the service when using a computer in a public place or one that others may use.

① Purpose of using cookies

Providing targeted marketing and personalized services through the analysis of access frequency and visit duration of members and non-members, identification of user preferences and interests, tracking of browsing history, and determination of participation in various events and visit counts.

② How to refuse cookie settings

By selecting options in your web browser, you can allow all cookies, be prompted for confirmation whenever a cookie is saved, or refuse the storage of all cookies. However, if you refuse the installation of cookies, there may be difficulties in providing the service.

– How to set up (based on IE): Tools at the top of the web browser > Internet Options > Privacy > Block Sites

8. Management of personal information of non-member customers

Non-member customers can also purchase goods and services.

For non-member orders, we request only the personal information strictly necessary for payment and product delivery.

If you make a purchase as a non-member, the payer and recipient information entered by the non-member customer will not be used for any purpose other than payment settlement and product delivery.

9. Outsourcing of Personal Information Processing

To improve our services, we may entrust the collection, handling, and management of your personal information to external parties if necessary, provided that legal requirements such as consent are met, and may provide it to third parties.

Regarding the processing of personal information, our company entrusts tasks as described below, and in accordance with relevant laws and regulations, we stipulate necessary provisions in entrustment contracts to ensure the safe management of personal information. Furthermore, the information shared is limited to the minimum necessary to achieve the stated purpose.

Consignees: KG Inicis Co., Ltd., NHN Korea Cyber Payment Co., Ltd., Naver Corp., Kakao Corp., eBay Korea Corp., NHN Payco Corp.

Entrusted Business Details: Card payments and real-time account transfers

Entrusted Parties: Kakao Corp., LG CNS Corp.

Outsourced Work Details: Sending SMS and KakaoTalk notifications

Entrusted party:

Outsourced Work Details: Bulk Email Sending

Entrusted Party: Dream Security Co., Ltd.

Details of entrusted work: Provision of mobile phone identity verification services

Consignee: Cafe24

Details of Outsourced Work: Server-related tasks and website operation and management

However, the following cases are exceptions.

– Where users have consented in advance, or in accordance with the provisions of laws and regulations, or when requested by investigative agencies for investigative purposes in accordance with the procedures and methods prescribed by law.

– In the event that we entrust or provide the processing of personal information, we will notify you in advance of matters regarding the trustee, the scope of entrustment, the scope of shared information, etc., in writing, via email, telephone, or through our website.

10. Guide to Third-Party Provision and Sharing of Personal Information

1. Matters concerning the provision of personal information to third parties

We collect the minimum essential information from customers for business processing, such as providing travel product reservation services. Unless separate consent is obtained, all provided personal information will not be used for any purpose other than the stated purpose. Personal information is provided under limited conditions only to companies directly involved in the performance of customer services, and the content provided is limited to the information contained in the invoice sent to the relevant customer.

2. In the following cases, personal information may be provided without the customer's consent as an exception.

– When there is a request from relevant authorities for investigative purposes pursuant to relevant laws and regulations, such as the Criminal Procedure Act, the Act on Real-Name Financial Transactions and Confidentiality, the Act on the Use and Protection of Credit Information, the Local Tax Act, the Consumer Protection Act, and the Bank of Korea Act.

– When necessary for fee settlement related to service provision

3. Right to refuse consent

– Data subjects have the right to refuse consent to the provision of personal information to third parties.

– Users may refuse the transfer of personal information overseas through the Company's Chief Privacy Officer and the relevant department.

– If you refuse to consent, product reservations will not be possible because information essential for performing the product service will not be provided.

11. Information on Sharing Personal Information Regarding International Transfer and Third-Party Provision

We collect the minimum essential information from customers for business processing, such as providing travel product reservation services. Unless separate consent is obtained, all provided personal information will not be used for any purpose other than the stated purpose. Personal information is provided under limited conditions only to companies directly involved in the performance of customer services, and the details are as follows.

Personal information items being transferred: All data required for product reservations, including name, contact number, email, etc.

Countries where personal information is provided: Countries where the reservation product or product supplier is located

Previous Date and Method: Sent via network or email upon product reservation

Purpose of Use: Provision of services and communications, protection of the rights, property, or safety of TripRAON or third parties, and purposes within the scope permitted by relevant laws.

Retention and Usage Period: Retained until membership withdrawal (except in cases where personal information must be preserved in accordance with relevant laws)

In the following cases, personal information may be provided without the customer's consent as an exception.

– When there is a request from relevant authorities for investigative purposes pursuant to relevant laws and regulations, such as the Criminal Procedure Act, the Act on Real-Name Financial Transactions and Confidentiality, the Act on the Use and Protection of Credit Information, the Local Tax Act, the Consumer Protection Act, and the Bank of Korea Act.

– When necessary for the settlement of charges related to the provision of services

Contact information of the recipient of provision/transfer, country of transfer, items provided/transferred, purpose of provision/transfer and retention/usage period

RaonHoldings Co.,Ltd info@tripraon.com Thailand Reservation Information: Name, Contact Number, Email, Gender, Date of Birth

Traveler Information: Name (English), Gender, Age (Children only) Purpose of provision: Product reservation and confirmation, responding to related inquiries

Retention and Usage Period: 2 years after the termination of the contract or until the retention period stipulated by relevant laws.

Right to refuse consent

– The data subject has the right to refuse consent to the provision of personal information to a third party.

– Users may refuse the transfer of personal information overseas through the Company's Chief Privacy Officer and the relevant department.

– If you refuse to consent, product reservations will not be possible because information essential for performing the product service will not be provided.

12. Matters concerning the collection of opinions and handling of complaints regarding personal information

We are collecting feedback from users regarding personal information protection and have established all procedures and methods to handle complaints.

Users may report complaints via telephone or email by referring to section “11. Affiliation, Name, and Contact Information of the Chief Privacy Officer and Person in Charge” specified at the bottom, and the Company will provide a prompt and sufficient response to such reports.

13. Affiliation, Name, and Contact Information of the Personal Information Management Officer and Person in Charge

We are doing our best to ensure that you can safely use good information.

The Personal Information Protection Officer shall be held responsible in the event of an incident that violates the matters notified to you regarding the protection of personal information.

– The user is responsible for maintaining the security of the password associated with their ID related to their personal information.

– The company will never directly ask users for their passwords by any means, so please take special care to prevent your password from being leaked to others.

– You should be especially careful when you are online in public places.

– The company has designated a Chief Privacy Officer and a person in charge responsible for gathering opinions and handling complaints regarding personal information, and their contact information is as follows.

Affiliation / Position: Im Hong-seok / Manager

E-MAIL : info@tripraon.com

Phone Number: 010-8214-8864

14. Measures to Ensure the Safety of Personal Information

In accordance with Article 30 (Measures for Securing the Safety of Personal Information) of the Enforcement Decree of the Personal Information Protection Act, the Company is taking the following measures necessary to ensure safety.

– Conduct regular internal audits

We conduct regular internal audits (once a quarter) to ensure the security of personal information handling.

– Minimization and training of employees handling personal information

We are implementing measures to manage personal information by designating employees who handle personal information and limiting access to those in charge to minimize the number of people involved.

– Technical measures to prevent hacking, etc.

To prevent the leakage and damage of personal information caused by hacking or computer viruses, the company installs security programs and performs periodic updates and checks. Furthermore, it installs systems in areas where external access is controlled and monitors and blocks access technically and physically.

– Encryption of personal information

Users' personal information and passwords are encrypted and stored and managed so that only the user knows them, and separate security features are used for important data, such as encrypting files and transmitted data or using file locking functions.

– Storage of access records and prevention of tampering

We store and manage records of access to the personal information processing system for at least six months, and use security features to prevent access records from being falsified, altered, stolen, or lost.

– Restriction on access to personal information

We are taking necessary measures to control access to personal information by granting, modifying, and revoking access rights to database systems that process personal information, and we are controlling unauthorized access from the outside by using intrusion prevention systems.

15. Duty of Disclosure

If there are any additions, deletions, or modifications to the content of the current Privacy Policy due to changes in government policies or security technologies, we will notify you through the 'Notices' section on the website.