Privacy Policy and Personal Location Information Processing Policy 

Geoplan Co., Ltd.

Privacy Policy and Personal Location Information Processing Policy

November 2024

Article 1 (Purpose of Processing and Retention Period of Personal Location Information)

1. This Policy sets forth matters concerning the processing of personal location information by Geoplan Co., Ltd. (hereinafter referred to as the “Company”) for the purpose of providing location-based services to users (those who have agreed to the Terms and Conditions of Location-Based Information Services; hereinafter referred to as “Users”).
   The Company processes personal location information for purposes such as identifying the User’s location, responding to emergency rescue requests, and providing destination guidance.
   The purposes and retention periods of the location-based services and personal location information provided by the Company are as follows:

Definition of Location Information
“Location information” refers to information that can be used to determine a location through a terminal that receives UUIDs (Universally Unique Identifiers), Major and Minor values transmitted from UWB tag devices located at specific places; location information collected through tag terminals used for location positioning; WPS information collected through devices equipped with Wi-Fi chips; or information collected through other devices capable of identifying a location.

Article 2 (Procedures and Methods for the Destruction of Personal Location Information)

1. The Company shall destroy personal location information without delay when such information becomes unnecessary due to the expiration of the retention period or the achievement of the purpose of processing.

2. When the purpose of use or provision of personal location information has been achieved, the Company shall immediately destroy the personal location information, except for confirmation records of the use and provision of location information as specified in Paragraph 3.
   However, if retention is required under other applicable laws or if the user has separately consented to the retention of personal location information, such information may be retained for up to one (1) year from the date of the user’s consent.

3. The procedures, timing, and methods for the destruction of confirmation records of the collection, use, and provision of personal location information are as follows:

   1. Destruction Procedure
      The Company establishes a plan for the destruction of confirmation records of the collection, use, and provision of personal location information (or personal location information files) that are subject to destruction and carries out such destruction accordingly.

   2. Destruction Method
      Personal location information confirmation records (or personal location information files) recorded and stored in electronic file format shall be destroyed in a manner that prevents restoration or reproduction.
      Information recorded and stored in paper documents shall be destroyed by shredding or incineration.

Article 3 (Access to and Correction of Personal Information)

1. Users may access or request correction of their registered personal information at any time, and may also request access to or notification of the reasons and details regarding the provision of their personal location information to third parties.

2. Upon receiving a request for access to or correction of personal information or location information, the Company shall promptly take necessary measures.
   The User shall submit the documents prescribed by the Company and appropriate proof of identity as the personal location information subject.

Article 4 (Consent to the Collection of Personal Location Information)

1. The Company collects personal location information with the consent of the personal location information subject in order to provide services smoothly and to provide services to which the User has given prior consent.

2. When collecting personal location information, the Company collects only the minimum information necessary to achieve the purpose of collection.

3. No person shall obtain another person’s personal location information by deceiving a location information service provider or related entity through duplication of another person’s information and communication device, theft of information, or any other fraudulent means.

4. Any person who rents out an object equipped with a device capable of collecting location information shall notify the renter in advance that such device is attached.

Article 5 (Provision of Personal Location Information to Third Parties)

1. If Geoplan intends to provide services using personal location information, it shall specify such matters in advance in the Terms and Conditions and obtain the consent of the personal location information subject.

2. If Geoplan provides personal location information to a third party designated by a user (tourist), it shall notify the member in advance of the recipient and the purpose of provision and obtain the member’s consent.

Article 6 (Cases Where the Contract Holder and the Actual User Are Different)

1. If the person who enters into the service use contract differs from the actual user of the location information collection terminal device, the actual user who uses the object capable of collecting location information shall be specified, and consent shall be obtained from the actual user.

2. If it is not possible to identify the actual user other than the contract holder and the user specified in the service contract, the contract holder shall be deemed the personal information subject.

3. In the case of a contract entered into with a corporation or organization, the Company may request the relevant corporation or organization to specifically designate the actual personal location information subject.
   The corporation or organization shall notify the individual of this fact and obtain the individual’s consent.

Article 7 (Rights and Obligations of Legal Guardians and Methods of Exercise)

In cases where a person falling under Article 26(2) of the Act on the Protection and Use of Location Information (hereinafter referred to as a “Legal Guardian”) gives consent to the use or provision of personal location information for the purpose of protecting the life or physical safety of a person falling under any of the following categories (hereinafter referred to as “Children Under the Age of 14, etc.”), Geoplan shall deem that the consent of the personal location information subject has been obtained.

1. Children under the age of 14

2. Adult wards

3. Persons with mental disabilities as defined under Article 2(2)2 of the Welfare of Persons with Disabilities Act who fall under the category of persons with severe disabilities pursuant to Article 2(2) of the Act on Employment Promotion and Vocational Rehabilitation for Persons with Disabilities (limited to those registered as persons with disabilities under Article 32 of the Welfare of Persons with Disabilities Act)

A legal guardian who intends to consent to the use or provision of personal location information for the protection of the life or physical safety of a child under the age of 14, etc. shall submit a written consent form along with documents proving their status as a legal guardian.
In such cases, the legal guardian shall exercise all the rights of the user under the Terms and Conditions of Location-Based Services.

Article 8 (Department in Charge of Location Information Protection)

Geoplan designates a person in charge of personal information and personal location information management to properly manage and protect personal information and personal location information, and to smoothly handle complaints from personal location information subjects.

Chief Officer in Charge of Personal Information and Location Information Management

1. Department: Solution Business Division, Geoplan

2. Officer: Sangjin Lee, Division Head

3. Contact: +82-31-689-5541

If the Privacy Policy is amended to reflect changes in laws or services, Geoplan shall post the revised Privacy Policy.
The revised Privacy Policy shall take effect seven (7) days from the date of posting.
However, if there is a material change affecting user rights, such as changes to the categories of personal information collected or the purposes of use, Geoplan shall provide prior notice at least thirty (30) days in advance.