Recruit

Privacy Policy

Last amended on July 29, 2025

Recruit Co., Ltd. (“Company”) has established this Privacy Policy to set forth the purpose and the method of use of users’ personal information when users use the services the Company operates (“Services”).
This Privacy Policy governs the data processing of Recruit Co., Ltd. (“Company”) in relation to the Jalan.net. Please read this Privacy Policy carefully in its entirety, including the jurisdiction-specific annexes which apply to you, which depends on your residency/location.

Annex: Korea

In addition, Lists of Cookies Used on the Websites and Lists of Cookies Used on the Apps are also provided, so please also refer to these as necessary.

Contents

1. Acquisition of personal information
2. Purpose of use of personal information
3. Provision of personal information to third parties
4. Receiving of personal information from companies, schools, associations, etc. that participate in the Services
5. Outsourcing of personal information handling
6. Provision of personal information to third parties in foreign countries
7. Request of disclosure, etc. of personal information
8. Voluntary nature of provision of personal information
9. Persons responsible for the business and manager for the protection of personal information
10. Contact details regarding personal information

1. Acquisition of personal information

The Company acquires personal information by the following methods:

  • Receiving personal information directly from users;
  • Automatically recording personal information when users use the Services;
  • Receiving users’ personal information indirectly from third parties; or
  • Acquiring personal information publicized in publications or on the Internet.

The Company also acquires from users or third parties information that does not by itself fall under personal information, such as attribute information (e.g., age, sex, occupation, or resident area), Cookies, IP addresses, advertising identifiers (AAID, IDFA), log information related to Internet usage, such as location information, activity history, and transmission information (including the details and subjects of communications sent to or received by users in connection with the use of the Services, whether received communications have been read, and whether or not any communications are sent or received) (collectively, “Informative Information”), and purchase history at physical shops. If a user provides personal information to the Company for use of the Services, the Company may link such information with such user’s Informative Information, in which case such Informative Information shall be treated as personal information.


2. Purpose of use of personal information

The Company uses personal information for the following purposes.

Please check here for information on “Group Companies.”

(1) Accommodation reservations (including notification to accommodation facilities, management of reservations, etc.)

[Collected Personal Information]

  • Full name;
  • Phone number;
  • Email address;
  • Postal address;
  • Legal adult age and parental consent; and
  • Information relating to reservation made by user (e.g., name of accommodation, room type, plan, check-in date, number of guests, etc.)


(2) Improvement and new development of our services including Jalan.net (e.g., analysis) (*)

*We will use the information (e.g., name and address) after processing it into information that cannot be used to identify specific individuals
[Collected Personal Information]

  • Reservation number;
  • Legal adult age and parental consent;
  • Information relating to reservation made by user (e.g., name of accommodation, room type, plan, check-in date, number of guests, etc.); and

Activity logs on Jalan.net, IP address and cookie.


(3) Responding to inquiries from users

[Collected Personal Information]

  • Full name;
  • Phone number;
  • Email address;
  • Postal address;
  • Legal adult age and parental consent;
  • Reservation method (PC or smartphone);
  • Information relating to reservation made by user (e.g., name of accommodation, room type, plan, check-in date, number of guests, etc.);
  • Reservation number, name of reserved accommodation, check-in date, and other items entered by the user in the inquiry details field and/or provided by user voluntarily through telephone conversation; and
  • Allergy and other health information and/or religion, if entered into the inquiry details field or through telephone conversation by user voluntarily (however, we never ask for these information).


(4) Preparation of statistical data

*We will use the information (e.g., name and address) after processing it into information that cannot be used to identify specific individuals
[Collected Personal Information]

  • Information relating to reservation made by user (e.g., name of accommodation, room type, plan, check-in date, number of guests, etc.); and

Activity logs on Jalan.net.


(5) To perform procedures related to the use of Jalan.net based on referrals from business partners (e.g., Payment of commissions for introductions and recommendations, etc.)

[Collected Personal Information]

  • Information relating to reservations made by users (e.g., reservation number, booking date, check-in date, check-out date, referrer, kayak click ID, payment amount, cancellation type etc.)


3. Provision of personal information to third parties

The Company will provide personal information in writing or by electromagnetic means to the following recipients in accordance with the respective paragraphs. The items of personal information that the Company provides may include Informative Information.

(1) Accommodations listed on Jalan.net for which users have made reservations (*)

* We are unable to list all accommodation as the list is updated from time to time.
[Purpose of Use of Personal Information by Recipient(s) ]

  • Accommodation reservations (including management of reservations, etc.)
  • To forward inquiries from users to accommodations upon users’ request

[Items of Personal Information Provided to Recipient(s) ]
For the purpose of accommodation reservations (including management of reservations, etc.)

  • Reservation number
  • Full name
  • Phone number
  • Postal Address
  • Email address
  • Information relating to reservation made by user, such as accommodation name, room type, plan, check-in date, number of guests, etc.

For the purpose of forwarding inquiries from users to accommodations upon users’ request

  • Full name;
  • Phone number
  • Postal Address
  • Email address;
  • Reservation method (PC or smartphone);
  • Reservation number, name of reserved accommodation, check-in date, and other items entered by the user in the inquiry details field;
  • Information relating to reservation made by user, such as accommodation name, room type, plan, check-in date, number of guests, etc.
  • Allergy and other health information and/or religion, if entered into the inquiry details field by user (however, we do not require these information).

[Period(s) of Retention/Use by Recipient(s)]
Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)


(2) Accommodations listed on Jalan.net

[Purpose of Use of Personal Information by Recipient(s)]
To improve their accommodation services and user accommodation experience

[Items of Personal Information Provided to Recipient(s)]
Statistical data, such as number of customers in a designated area (*)
* any information which can identify a specific user, including name, e-mail address, activity logs etc., will not be provided.

[Period(s) of Retention/Use by Recipient(s)]
Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)


(3) Business partner companies for use of Jalan.net

[Purpose of Use of Personal Information by Recipient(s)]
・To handle procedures related to referrals to Jalan.net (Payment of commissions for introductions and recommendations, etc.)

[Items of Personal Information Provided to Recipient(s)]
・Information relating to reservations made by users (e.g., reservation number, booking date, check-in date, check-out date, referrer, kayak click ID, payment amount, cancellation type etc.) (*)
* Any information which can identify a specific user, including name, e-mail address, etc., will not be provided.

[Period(s) of Retention/Use by Recipient(s)]
Until the purpose of transfer is achieved (however, if the business partner specifies a retention period, that period will apply)

Furthermore, other than the above, the Company may provide personal information to third parties to follow laws and regulations (including when responding to investigations of police and orders of courts) or if it separately obtains a user’s consent, specifying the party to whom the information is to be disclosed, the information to be disclosed, purpose of use, and disclosing the means or method.


4. Receiving of personal information from companies, schools, associations, etc. that participate in the Services

The Company properly receives personal information in writing or by electromagnetic means from the following sources in accordance with the respective paragraphs. The items of personal information that the Company receives may include Informative Information.
[Receiving purpose of the Company]

  • To confirm chargeable items with companies, schools, associations, etc. to which a user applied using the Services;
  • Provision of operation of the Services that a user uses and communication and information with user accompanied by the operation; and
  • To improve and newly develop the Services, and for research, analysis, and marketing associated therewith.

[Items of personal information that will be received]

  • The fact of users’ usage, usage status, or usage results of the Services


5. Outsourcing of personal information handling

[If the Company conducts outsourcing]

  • The Company may outsource personal information handling operations in part or in whole. In such case, the Company will provide necessary and proper direction to the party to whom such operations are outsourced.

[If the Company is entrusted with handling personal information]

  • If the Company is entrusted with personal information handling operations in part or in whole from companies, schools, associations, etc. that participate in the Services, the Company will handle entrusted personal information to perform the entrusted operations.
  • The Company may add to user’s personal information received from companies, schools, associations, etc. that participate in the Services, user’s personal information held by Company by receiving commission from such companies, schools, associations, etc. to improve and newly develop the Services, and to conduct research, analysis, and marketing associated therewith.
  • If the Company receives commission of analysis business from companies, schools, associations, etc. that participate in the Services, for users designated by such companies, schools, associations, etc., the Company may produce aggregated analysis results by adding to user’s personal information received from such companies, schools, associations, etc., user’s attribute information and log information related to Internet usage such as location information or activity history held by the Company and provide such analysis results to such companies, schools, associations, etc.*

*When the Company prepares and provides analysis results or results of advertisement distribution, etc. as a commission, it will process such information to ensure that the information alone cannot be used by such companies, schools, associations, etc. to identify particular individuals, by methods such as excluding information on names and addresses and replacing them with attribute information on sex or age, etc.


6. Provision of personal information to third parties in foreign countries

We may provide personal information to third parties in foreign countries (meaning countries or areas outside Japan) in the following cases.

[If the Company provides personal information to third parties]

  • If the party to whom personal information will be provided is a third party in a foreign country, the Company will use personal information within the scope provided under “3. Provision of personal information to third parties”;
  • Please see here for the names of countries to which personal information will be provided and personal information protection systems of foreign countries to which personal information will be provided; and
  • The third parties to whom personal information will be provided comply with personal information protection systems of the relevant foreign country.

[If the Company outsources personal information handling operations]

  • Some of the contractors to which the Company outsources all or part of personal information handling operations may be contractors in foreign countries. In such case, the Company confirms that such contractor has established systems that comply with the standards stipulated in the Act on the Protection of Personal Information.

[If the Company provides personal information due to succession of business by merger or other events]

  • A successor to a business due to merger or other reasons may be an entity in a foreign country. In such case, such successor will handle personal information within the scope of purpose of use before succession of such business.


7. Request of disclosure, etc. of personal information

The Company will store and use personal information within the scope and for the period necessary to comply with laws and regulations or to achieve the purposes of use, but the user or agent thereof may, in accordance with the procedures prescribed by the Company, request the Company to disclose, correct, add, or delete content, or discontinue utilizing or erase the personal information that can be used to identify the user. For details on how to make such requests, please contact us as set forth in “10. Contact details regarding personal information”. However, the Company might not respond to the request to the extent permitted by law.

Furthermore, in order to prevent false requests due to identity theft, etc. the Company will conduct identification by using reasonable methods such as requesting submission of identification documents at the time of a request. If all items necessary for identification prescribed by the Company are fulfilled, the Company will consider such request is from the user itself and respond to the request, but even if such request is from third parties other than such user who obtained personal information or identification documents of the user, the Company will not be responsible for damages incurred by the user due to responding to such request unless the Company is intentionally grossly negligent or in violation of the Consumer Contract Act by the Company. Please be careful in handling your personal information.


8. Voluntary nature of provision of personal information

Provision of personal information from users is voluntary, but if a user does not enter items necessary for Services, such user may not be able to use Services.


9. Persons responsible for the business and manager for the protection of personal information

[Person responsible for the business] Recruit Co., Ltd. Head of Product Division

[Manager for the protection of personal information] Recruit Co., Ltd. Head of Privacy Risk Control Department


10. Contact details regarding personal information

Please contact us via: here


Annex: Korea
This Annex (this “Annex”) applies to the data subjects located or residing in the Republic of Korea (“Korea”). This Annex should be read together with the Privacy Policy, and in case of any conflict, the terms of this Annex will prevail as to personal information of Korean data subjects.

  1. Legal Basis for Processing
    We process your personal information pursuant to the following legal basis for the purposes stated in “2. Purpose of use of personal information” of the Privacy Policy.

    1. Accommodation reservations (including notification to accommodation facilities, management of reservations, etc.)  [Legal Basis]
       your consent
       [Collected Personal Information]

      • Full name;
      • Phone number;
      • Email address;
      • Postal address;
      • Legal adult age and parental consent; and
      • Information relating to reservation made by user (e.g., name of accommodation, room type, plan, check-in date, number of guests, etc.)
    2. Improvement and new development of our services including Jalan.net (e.g., analysis) (*)
      *We will use the information (e.g., name and address) after processing it into information that cannot be used to identify specific individuals
       [Legal Basis]
       your consent
       [Collected Personal Information]

      • Reservation number;
      • Legal adult age and parental consent;
      • Information relating to reservation made by user (e.g., name of accommodation, room type, plan, check-in date, number of guests, etc.); and

      Activity logs on Jalan.net, IP address and cookie.

    3. Responding to inquiries from users
       [Legal Basis]
       your consent
       [Collected Personal Information]

      • Full name;
      • Phone number;
      • Email address;
      • Postal address;
      • Legal adult age and parental consent;
      • Reservation method (PC or smartphone);
      • Information relating to reservation made by user (e.g., name of accommodation, room type, plan, check-in date, number of guests, etc.);
      • Reservation number, name of reserved accommodation, check-in date, and other items entered by the user in the inquiry details field and/or provided by user voluntarily through telephone conversation; and
      • Allergy and other health information and/or religion, if entered into the inquiry details field or through telephone conversation by user voluntarily (however, we never ask for these information).
    4. Preparation of statistical data for provision of information to accommodations
       [Legal Basis]
       your consent
       [Collected Personal Information]

      • Information relating to reservation made by user (e.g., name of accommodation, room type, plan, check-in date, number of guests, etc.); and

      Activity logs on Jalan.net.

    5. To perform procedures related to the use of Jalan.net based on referrals from business partners (e.g., Payment of commissions for introductions and recommendations, etc.)
       [Legal Basis]
       your consent
       [Collected Personal Information]

      • Information relating to reservations made by users (e.g., reservation number, booking date, check-in date, check-out date, referrer, kayak click ID, payment amount, cancellation type etc.)
  2. Retention Period and Term of Use of Collected Personal Information
    When personal information is no longer needed, such as when the retention period of the personal information has expired or the purpose of use has been achieved, the Company will dispose of such personal information without delay. However, the foregoing shall not apply in cases where personal information must be preserved in accordance with the provisions of other laws and regulations, such as the cases listed in the following items. In such cases, the Company will store and manage such personal information separately from other personal information for the period stipulated by such laws and regulations.

    • Log-in and IP address records: 3 months (Communications Secrecy Act)
    • Records concerning labels and advertisements: 6 months (Act on the Consumer Protection in Electronic Commerce)
    • Records concerning cancellation of contracts or subscriptions: 5 years (Act on the Consumer Protection in Electronic Commerce)
    • Records relating to payments, provision of goods or services: 5 years (Act on the Consumer Protection in Electronic Commerce)
    • Records concerning consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce)
  3. Procedures and Methods for Destroying Personal Information
    In accordance with laws, regulations, and internal rules, including when we receive a request to delete personal information, we delete personal information by physically deleting or masking information that could identify a specific individual.

  4. Transfer of Personal Information to Third Parties

    1. Provision of personal information to third parties

      • Accommodations listed on Jalan.net for which users have made reservations (*)
        * We are unable to list all hotels as the list is updated from time to time.

        [Purpose of Use of Personal Information by Recipient(s)]

        • Accommodation reservations (including management of reservations, etc.)
        • To forward inquiries from users to accommodations upon users’ request

        [Items of Personal Information Provided to Recipient(s)]
        In case of accommodation reservations (including management of reservations, etc.)

        • Reservation number
        • Full name
        • Phone number
        • Postal Address
        • Email address
        • Information relating to reservation made by user, such as accommodation name, room type, plan, check-in date, number of guests, etc.

        In case of forwarding inquiries from users to accommodations upon users’ request

        • Full name;
        • Phone number
        • Postal Address
        • Email address;
        • Reservation method (PC or smartphone);
        • Reservation number, name of reserved accommodation, check-in date, and other items entered by the user in the inquiry details field and/or provided by user voluntarily through telephone conversation;
        • Information relating to reservation made by user, such as accommodation name, room type, plan, check-in date, number of guests, etc.
        • Allergy and other health information and/or religion, if entered into the inquiry details field by user (however, we do not require these information).

        [Period(s) of Retention/Use by Recipient(s)]
         Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)

      • Accommodations listed on Jalan.net (*)
        * We are unable to list all hotels as the list is updated from time to time.
        [Purpose of Use of Personal Information by Recipient(s)]
         To improve their accommodation services and user accommodation experience
        [Items of Personal Information Provided to Recipient(s)]
         Statistical data, such as number of customers in a designated area (*)
         * any information which can identify a specific user, including name, e-mail address, activity logs etc., will not be provided.
        [Period(s) of Retention/Use by Recipient(s)]
         Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)

      • Business Partner companies for use of Jalan.net
        [Purpose of Use of Personal Information by Recipient(s)]
        ・To verify and settle commissions from the introduction and referral of Jalan.net

        [Items of Personal Information Provided to Recipient(s)]
        ・Information relating to reservations made by users (e.g., reservation number, booking date, check-in date, check-out date, referrer, kayak click ID, payment amount, cancellation type etc.) (*)
        *Any information which can identify a specific user, including name, e-mail address, etc., will not be provided.

        [Period(s) of Retention/Use by Recipient(s)]
        Until the purpose of transfer is achieved (however, if the business partner specifies a retention period, that period will apply)

    2. Outsourcing of the processing of personal information to third parties

      • Salesforce Japan Co., Ltd.
        [Outsourced Operations]
         To store and manage inquiries from customers

      • SB Payment Service Corp.
        [Outsourced Operations]
         To handle online payment for reservations made by customers with accommodation facilities

      • Accertify, Inc.
        [Outsourced Operations]
         To detect fraudulent use of credit cards

      • Nexway Co., Ltd.
        [Outsourced Operations]
         To contact the accommodation facility selected by the customer to make a reservation

    3. Cross-border outsourcing of the processing/storage of personal information to third parties

      • Salesforce Japan Co., Ltd.
        [Contact]
          1-1-3, Marunouchi, Chiyoda-ku, Tokyo, Japan, 100-0005
        [Items of Personal Information to be Transferred to Recipient(s)]

        • Full name;
        • Email address;
        • Reservation method (PC or smartphone);
        • Reservation number, name of reserved accommodation, check-in date, and other items entered by the user in the inquiry details field.

        [Countries where the Personal Information is to be Transferred and the Date, Time, Methods of Transfer]
         Country: Japan and the United States
         Date/Time/Method of Transfer: Upon receiving inquiries from customers, transferred via secure network
        [Purpose of Use of the Personal Information by Recipient(s)]
         To store and manage inquiries from customers
        [Period(s) of Retention/Use by Recipient(s)]
         Five (5) years from completing reservation
        [Legal Basis for the Cross-Border Transfer]
         PIPA, Article 28-8(1)(iii)

      • SB Payment Service Corp.
        [Contact]
         Tokyo Portcity Takeshiba Office Tower, 1-7-1, Kaigan, Minato-ku, Tokyo, Japan, 105-0022
        [Items of Personal Information to be Transferred to Recipient(s)]

        • Payment charge
        • Credit card number
        • Expiring date (month/year)
        • Cardholder’s name
        • Security code

        [Countries where the Personal Information is to be Transferred and the Date, Time, Methods of Transfer]  Country: Japan
         Date/Time/Method of Transfer: Upon entering credit card information, transferred via secure network
        [Purpose of Use of the Personal Information by Recipient(s)]
         To handle online payment for reservations made by customers with accommodation facilities
        [Period(s) of Retention/Use by Recipient(s)]
         Until the completion of the outsourced tasks and the expiration of the outsourced contract
        [Legal Basis for the Cross-Border Transfer]
         PIPA, Article 28-8(1)(iii)

      • Accertify, Inc.
        [Contact]
         2 Pierce Place, Suite 900, Itasca, Illinois, 60143 USA
        [Items of Personal Information to be Transferred to Recipient(s)]

        • Full name;
        • Email address;
        • Postal address;

        [Countries where the Personal Information is to be Transferred and the Date, Time, Methods of Transfer]
         Country: the United States
         Date/Time/Method of Transfer: Upon entering credit card information, transferred via secure network
        [Purpose of Use of the Personal Information by Recipient(s)]
         To detect fraudulent use of credit cards
        [Period(s) of Retention/Use by Recipient(s)]
         Two (2) years from transmission
        [Legal Basis for the Cross-Border Transfer]
         PIPA, Article 28-8(1)(iii)

      • Nexway Co., Ltd.
        [Contact]
         Toyosu Bay Side Cross Tower, 2-2-1, Toyosu, Koutou-ku, Tokyo, Japan, 135-0061
        [Items of Personal Information to be Transferred to Recipient(s)]

        • Reservation number
        • Full name
        • Phone number
        • Postal Address
        • Email address
        • Information relating to reservation made by user, such as accommodation name, room type, plan, check-in date, number of guests, etc.

        [Countries where the Personal Information is to be Transferred and the date, time, methods of Transfer]
         Country: Japan and Singapore
         Date/Time/Method of Transfer: Upon completing reservation or request from accommodation
        [Purpose of Use of the Personal Information by Recipient(s)]
         To contact the accommodation facility selected by the customer to make a reservation
        [Period(s) of Retention/Use by Recipient(s)]
         Sixty-five (65) days from facsimile to reserved accommodation
        [Legal Basis for the Cross-Border Transfer]
         PIPA, Article 28-8(1)(iii)

        You have the right to decline granting your consent. However, please be aware that exercising this right may impose restriction on completing reservations.

    4. In the case of cross-border access by or disclosure to third parties (“Recipients”) for their benefit (Provision)

      1. Accommodations listed on Jalan.net for which users have made reservations (*)
        * We are unable to list all hotels as the list is updated from time to time.
         [Country and Date/Time/Method of transfer]
           Country: Japan
           Date/Time/Method of Transfer: Upon completion of the online reservation or request by user to forward inquiries, the information will be transferred via secure network (including facsimile or telephone)
        [Personal Information to be Transferred]
        In case of completing reservation:

        • Reservation number
        • Full name
        • Phone number
        • Postal Address
        • Email address
        • Information relating to reservation made by user, such as accommodation name, room type, plan, check-in date, number of guests, etc.

        In case of forwarding user inquiries, the following information may be transferred in addition to the above:

        • Reservation method (PC or smartphone);
        • Reservation number, name of reserved accommodation, check-in date, and other items entered by the user in the inquiry details field and/or provided by user voluntarily through telephone conversation;
        • Information relating to reservation made by user, such as accommodation name, room type, plan, check-in date, number of guests, etc.; or
        • Allergy and other health information and/or religion, if entered into the inquiry details field or through telephone conversation by user voluntarily (only if requested with urgent needs by user).

        [Purpose of use by Recipient]

        • Accommodation reservations (including management of reservations, etc.)
        • Forwarding user inquiries

        [Retention period of collected personal information]
         Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)
        [Legal basis for the cross-border transfer]
         PIPA, Article 28-8(1)(i)

      2. Accommodations listed on Jalan.net (*)
         * We are unable to list all hotels as the list is updated from time to time.
         [Country and Date/Time/Method of Transfer]
          Country: Japan
          Date/Time/Method of Transfer: Upon request of the accommodations or providing advices regarding use of Jalan.net to the accommodations, the information will be transferred via secure network (including facsimile or telephone) or by hand
         [Personal Information to be Transferred]
          Statistical data, such as number of customers in a designated area (*)
          * any information which can identify a specific user, including name, e-mail address, activity logs etc., will not be provided.
         [Purpose of Use by Recipient]
          To improve their accommodation services and user accommodation experience
         [Retention Period of Collected Personal Information]
          Until the purpose of transfer is achieved (however, if there is a retention period set by each accommodation facility, the retention period shall be in accordance with such period)
         [Legal Basis for the Cross-Border Transfer]
          PIPA, Article 28-8(1)(i)

      3. Business partner companies for use of Jalan.net
         [Third-party recipient]
          Company Name: KAYAK Software Corporation
         [Country and Date/Time/Method of Transfer]
          Country: USA
          Date/Time/Method of Transfer: Upon a user's checkout from or cancellation of their accommodation, the information will be transferred via secure network (including facsimile or telephone)
         [Personal Information to be Transferred]
          Information relating to reservations made by users (e.g., reservation number, booking date, check-in date, check-out date, referrer, kayak click ID, payment amount, cancellation type etc.)(*)
          *Any information which can identify a specific user, including name, e-mail address, etc., will not be provided.
         [Purpose of Use by Recipient]
          To verify and settle commissions from the introduction and referral of Jalan.net
         [Retention Period of Collected Personal Information]
          Until the purpose of transfer is achieved (however, if the business partner specifies a retention period, that period will apply)
         [Legal Basis for the Cross-Border Transfer]
          PIPA, Article 28-8(1)(i)

        You have the right to decline granting your consent. However, please be aware that exercising this right may impose restriction on completing reservations.

  5. Measures to Ensure Security of Personal Information
    The Company implements the following technical, managerial, and physical measures necessary to ensure the security of the personal information.

    • Managerial measures: Designation of a CPO, establishment and implementation of an internal management plan, regular training of employees on protection of personal information, etc.
    • Technical measures: Management of the right to access the personal information processing system, installation of an access control system, installation of security programs, etc.
    • Physical measures: Restriction on access to Personal information storage mediums such as the computer room and data storage room, etc.
  6. Contact Information / Domestic Representative

    • Name of Domestic representative: Lee & Ko
    • Address of Domestic representative: Hanjin Building, 63 Namdaemun-ro, Jung-gu, Seoul 04532, Korea
    • Phone number: +82-2-6368-7197
    • Email address: privacy_recruitholdings@leeko.com
  7. Chief Privacy Officer

    • Travel Information Product Management Unit
    • cpo_jalan_korea@ml.cocorou.jp
  8. Rights of Data Subjects
    You (and your legal representative) have statutory rights under the Korean Personal Information Protection Act, in particular the right to access, rectification, erasure, suspension of processing, withdrawal of consent, and request explanations regarding automated decision-making or not be subject thereto.
    You (or your legal representative) can exercise such rights by contacting our Domestic representative or CPO using the contact details set out in the above.