Article 1 Purpose

In principle, the accommodation agreement to be concluded with Hotel28 and ancillary agreements shall be subject to the provisions of these terms and conditions and the matters not specified in these terms and conditions, to applicable laws and customs.

Article 2 Reservation

If you wish to stay at Hotel28, you can make a reservation for your stay by telephone, our homepage, or online travel agency.

Article 3 Accommodation Refusal

Hotel28 may refuse providing accommodation in following cases.

1. 1. In the event that the reservation is not made in accordance with these terms and conditions.
2. 2. In the event that no rooms are available.
3. 3. In the event that the guest is expected to commit a violent act or an act that may harm public order.
4. 4. In the event that the guest is inflicting harms on other guests or the hotel staff in terms of language or violence.
5. 5. In the event that the guest is clearly identified to carry infectious disease.
6. 6. In the event that the guest is carrying items (animals, drugs, firearms, etc.) prohibited by the hotel.
7. 7. In the event that the hotel is incapable of providing the accommodation due to natural disasters, breakdown of facilities or other unavoidable reasons
8. 8. In the event that the guest cannot stay at the hotel in accordance with the provisions of the laws and regulations of the Republic of Korea.
9. 9. In the event that there are other reasonable causes.

Article 4 Deposit for Reservation

Hotel28 may request a deposit for reservation at the time of making reservation depending on the method of reservation.

Article 5 Presentation of Name, Etc.

Hotel28 may request for the presentation of the following information of the reserving person when receiving the request for reservation.

1. 1. Name, gender, contact information of the person making reservation.
2. 2. Other information that the hotel deems necessary.

Article 6 Cancellation of Reservation by Reserver

In the event the person who made reservation cancels all or part of the reservation, Hotel28 will charge a penalty according to the following criteria.

1. 1. Cancellation made 1 day prior to the scheduled date of visit (before 15:00 in Seoul Time)
2. - No penalty
3. 2. Cancellation made 1 day prior to the scheduled date of visit (from 15:00 to 24:00 in Seoul Time)
4. - 100% of the accommodation charge for 1 day
5. 3. Cancellation on the scheduled date of visit
6. - 100% of accommodation charge for 1 day
7. 4. If you do not show up without a cancellation request.
8. - 100% of accommodation charge for 1 day

* Different cancellation policies may apply to online reservations and group customers, and long stays.

Article 7 Cancellation of Reservation by Hotel

1. 1. Hotel28 may cancel the reservation as an exception limited to the following cases.
   • ① In the event Paragraphs 3-9 of Article 3 applies.
   • ② In the event the guest is requested to present the information specified in Article 5, however, failed to present them until the requested date.
   • ③ In the event we have requested for the payment of the reservation deposit as set forth in Article 4 of this Agreement but the guest has not provided the deposit by the deadline.
2. 2. If the reservation is canceled in accordance with the provisions of the preceding paragraph,
   The hotel will refund the deposit provided by the guest.

Article 8 Accommodation Registration

Guests must provide the following information to register for accommodation at the hotel’s front desk on the day of staying.

1. 1. Matters of specified under Paragraph 1 of Article 5.
2. 2. Passport number, passport expiration date.
3. 3. Resident Registration Number (Korean)
4. 4. Current address, phone number, date of birth, email.
5. 5. Date and time of departure from hotel.
6. 6. Consent to the collection and use of personal information.
7. 7. Other information that the hotel deems necessary.

Article 9 Check-in Time and Check-out Time

1. 1. Check-in time is 15:00.
2. 2. Check-out time is 12:00.
3. 3. If a guest makes a request to delay the check-out time till 15:00, 30% of the room fare will be charged additionally.
4. 4. If a guest makes a request to delay the check-out time till 18:00, 50% of the room fare will be charged additionally.
5. 5. If a guest checks out after 18:00, a full room fare will be charged additionally.

Article 10 Operating Hours for Ancillary Facilities

The operating hours for the ancillary facilities are indicated on the separate page.
*The hours are subject to change depending on circumstances.

Article 11 Payment of Charges

The charges are based on Korean Won and can be paid ny cash, wire transfer, or credit card (check card) under the guest’s own name when paid at the hotel.

Article 12 Compliance with Usage Rules

Customers who use Hotel28 must comply with our hotel’s rules of use.

Article 13 Refusal of Extension of stay

Hotel28 may refuse to extend the lodging in any of the following cases.

1. 1. In the event that Article 3 of this Agreement applies.
2. 2. In the event that the customer does not comply with hotel policy.
3. 3. In the event that there are justifiable reasons.

Article 14 Responsibility of Lodging Facilities

1. 1. Hotel28 shall make sure that its guests do not experience inconvenience in using its facilities
2. from the registration of guests at the front desk to the check-out.
3. 2. The hotel is not responsible for the damage caused by the guest such as violating Hotel28’s policies.
4. 3. In the event that Hotel28 becomes unavailable for use due to the reasons attributable to the hotel, the hotel will recommend other accommodations under the same or similar conditions.

Article 15 Taking and Returning Room Key

1. 1. The guest must take the room key at the front desk when registering for the accommodation and return the key when checking out with payment.
2. 2. In the event the guest loses the key while staying, it must be notified to the front desk immediately.

1. Items of Personal Information to be Collected and Methods of Collection

1. A. Items of Personal Information to be Collected
   1. First, the Company collects the minimum amount of personal information at the time when a user joins the Company’s membership system for the first time in order to provide services and consultations, and the minimum amount of personal information refers to:
      1. [Membership Registration]
         1. Required Items: ID, password, name, date of birth, sex, a cellular phone number for identification and information on legal guardian, if the member is under 14 years of age (name, DI and cellular phone number of the legal guardian is collected, and the information is stored till the child reaches the age of majority.)
         2. Optional Item: E-mail address for emergency contact (optional items are not required to join the membership).
      2. [Organizational Membership Registration]
         1. Required Items: Organization ID, organization name, corporate name (name of the organization), name of the representative, place of business, phone number, administrator ID, cellular phone number of the administrator and affiliation/title of the administrator.
         2. Optional Item: Fax number (optional items are not required to join the membership).
   2. Second, the following information can be generated automatically and collected during the use of a service, or during a business process.
      1. IP address, cookie, date and time of visit, service use record, faulty use record and device information
   3. Third, the following information can be collected among users of additional service(s) and/or customized service(s) through HOTEL28ID.
      1. If a user has agreed to provide additional personal information.
   4. Fourth, the following information can be collected among users of certain services such as adult content(s), paid services and game(s) in order to observe the relevant laws.
      1. Name, date of birth, sex, duplication of information (DI), connecting information (CI), cellular phone number (optional), I-pin number (if using an I-pin) and domestic/foreign user information
   5. Fifth, the following billing information can be collecting among users of paid service(s).
      1. Credit card payment: credit card company name, credit card number and etc.
      2. Cellular phone payment: cellular phone number, service provider name, payment approval number and etc.
      3. Wire transfer payment: bank name, account number and etc.
      4. Certificate payment: certificate number
2. B. Methods of Collecting Personal Information

   The Company collects personal information through the following methods:

   1. Website, written format, fax, phone, consultation board, e-mail, event submission and delivery request
   2. Provided by a cooperating company
   3. Collection via generated information collection tool(s)

2. Collection and Use of Personal Information

1. A. Fulfillment of a contractual duty to provide a service and payment(s) followed by a provision of a service

   Provision of content(s), provision of certain customized service(s), delivery of good(s) and/or bill(s), identification, purchase and payment and collection of payment

2. B. Management of Memebers

   Provision of membership service, restriction on members those who have violated the Terms & Conditions of Foreheal Hotel, restriction on behaviors that cause normal operation of services, restriction on dishonest use of services, confirmation of intention to join, restriction on joining of a member or number of times of joining, confirmation of agreement of a legal guardian when collecting personal information of a child under the age of 14, identification of the legal guardian, preservation of record for dispute mediation, handling of customer inquiries such as adjustments of complaints, delivery of notifications and confirmation of intention to cancel a membership

3. C. Use for Development of a New Service and Marketing/Advertisement

   Development of a new service and provision of a customized service, provision of a service and advertisement according to statistical characteristics, confirmation of effectiveness of a service, provision of even information and participation opportunities, provision of advertising information, learning of frequency of access and statistics on service use of members

3. Sharing and Provision of Personal Information

The Company shall use the personal information of its members within the range specified under “2. Collection and Use of Personal Information,” and shall not extend the range or disclose the personal information of its members to a third party without a prior consent of users. However, the following cases are exceptions:

1. A. Prior consent of users has been obtained.
2. B. The Company was asked to disclose the personal information of its users according to the law, or a formal request was made by an investigative authority for investigative purposes according to the means and procedures of the law.

4. Consignment of Personal Information

The Company consigns personal information processing as the following in order to improve its services, and has established a set of regulations on consignment of personal information according to the law in order to protect the personal information.

The consignment organization and the range of consignment are as the following:

5. Retention and Use period of Personal Information

The Company will immediately destroy the personal information collected once the personal information retention period expires or else the purpose of processing thereof has been achieved. However, the following information will be retained for the following reasons for a specified period of time:

1. A. Reasons to Retain Information due to the Internal Policy of the Company
   1. Records of dishonest use (records of abnormal service use such as dishonest membership submission and disciplinary records)
      1. Retained Items: cellular phone number identified at the time of membership submission, and DI of legal guardian if the member is under the age of 14
      2. Retention Reason: Prevention of dishonest membership submission and/or use
      3. Retention Period: 1 year
      4. ※ ‘Records of dishonest use’ refers to the records of restrictions made by the Company due to dishonest membership submission, posting of contents that violate the operation principles and etc.
2. B. Reasons to Retain Information according to the Law

   If it is necessary to retain personal information collected in accordance with the law such as the Commercial Law and the Consumer Protection in the Electronic Commerce Transactions Act, the Company will retain the personal information collected during certain periods specified by the each law. In such cases, the Company shall use the retained personal information for the purpose of the retention only, and the retention periods are as the following:

   1. Records on Withdrawal from a Contract or a Subscription
      1. Retention Reason: Consumer Protection in the Electronic Commerce Transactions Act
      2. Retention Period: 5 years
   2. Records on Payment and Provision of Goods
      1. Retention Reason: Consumer Protection in the Electronic Commerce Transactions Act
      2. Retention Period: 5 years
   3. Records on Electronic Financial Transaction
      1. Retention Reason: Electronic Financial Transaction Act
      2. Retention Period: 5 years
   4. Records on Consumer Complaint and Dispute Mediation
      1. Retention Reason: Consumer Protection in the Electronic Commerce Transactions Act
      2. Retention Period: 3 years
   5. Records on Access to Website
      1. Retention Reason: Protection of Communications Secrets Act
      2. Retention Period: 3 months

6. Procedures and Methods of Destroying Personal Information

The Company will immediately destroy personal information when the purpose of collection and use of personal information is achieved.

1. A. Procedures of Destroying
   1. The information entered by the user for the purpose of membership submission and etc. will be moved to a separate DB (a separate filing cabinet for paper) after the purposes are achieved, and destroyed after it is stored for a certain period of time according to information protection clauses pursuant to internal policies and other related laws (see the retention and use period).
   2. The personal information moved to a separate DB will not be used for any purpose other than retention unless necessitated by law.
2. B. Methods of Destroying
   1. Personal information printed on paper must be shredded in a paper shredder or incinerated.
   2. Personal information stored in the form of electronic files must be deleted using a technical method ensuring that the records cannot be reproduced.

7. Rights of Users and Their Legal Guardians, and How to Exercise the Rights

1. Users and their legal guardians may view or modify their own registered personal information or the personal information of children under 14 years of age at any time. If a user or a legal guardian does not agree to the processing of personal information by the Company, he/she can demand to withdraw his/her consent, or request to cancel the membership. However, in such cases, a user might not be able to use the entire or partial service(s).
2. Users and their legal guardians can click on ‘Modify Personal Information’ (or ‘Modify Member Information’) to view and/or modify their own registered personal information or the personal information of children under 14 years of age after going through the identification procedure. Users and their legal guardians can click on “Cancel Membership” to cancel their memberships (to withdraw consent) after going through the identification procedure.
3. Or, contact the Chief Privacy Officer via mail, phone or e-mail, and the Company will process the request without delay.
4. If errors in personal information are requested to be corrected, the Company will not use or provide the personal information until the requested correction has been completed. Also, if the wrong personal information has already been provided to a third party, the Company will immediately notify the results of any corrections to a third party so that the corrections can be made properly.
5. The Company will process the personal information cancelled or deleted at the request of users or their legal guardians as stipulated in "5. Retention and Use Period of Personal Information," and make sure that it cannot be viewed or used for any other purposes beyond the permitted scope defined.

8. Matters concerning the Installation/Operation of an Automatic Personal Information Collection Device and the Rejection Thereof

1. A. What is a Cookie?
   1. The Company uses ‘cookies’ that frequently save and retrieve user’s information in order to provide personalized and customized services.
   2. A cookie is a very small text file that the server, used to operate the Company’s website, sends to a user’s browser. It is saved in the hard disk of the user’s computer. After it is saved, the website server reads the cookie saved on the user’s hard disk when the user visit the website in order to maintain the configurations of the user and provide customized services.
   3. A cookie does not automatically collect information that can identify users, and users can refuse to save cookies or delete the saved cookies at all times.
2. B. Purpose of the Company in Use of Cookies

   The Company uses cookies in order to provide its users with customized and personalized services including advertisements by learning forms of access and use of services of HOTEL28and websites, popular search keywords, secured connection, news edit, scale of users and etc.

3. C. Installation/Operation and Refusal of Cookies
   1. Users reserve the right to choose whether to install cookies. Thus, users can allow cookies, check a cookie each time it is saved, or refuse to save cookies all together by selecting an option on the web browser.
   2. However, if a user refuse to save cookies, he/she might experience difficulties in use of certain services provided by Foreheal Hotel.
   3. Users can allow cookies (on Internet Explorer) as the following:
      1. ① Click the [Tools] button and select [Internet Option].
      2. ② Click the [Privacy Tab].
      3. ③ Adjust your settings.

9. Technical/Administrative Measures to Protect Personal Information

To prevent personal information from being lost, stolen, leaked, altered or damaged and ensure safety when handling the personal information of information principals, the Company takes the following technical/administrative measures:

1. A. Encryption of Password

   Password of each member of HOTEL28are encrypted before they are saved and managed. Only the member knows his/her password, and viewing/modification of personal information is available only to the person who knows the password.

2. B. Security Precautions against Hacking and etc.

   The Company is providing its utmost effort to prevent leakage of and/or damage on personal information of its members by hacking, computer viruses and etc. The Company frequently makes back-ups on data in order to prevent damages on personal information. The Company prevents leakage of and damage on personal information by using the latest vaccine programs. The Company uses encryption communications and etc. to safely transmit personal information on the network. Moreover, the Company is operating an intrusion prevention system to restrict unauthorized external intrusion, and providing efforts to adapt all possible technological measures to obtain systematical security.

3. C. Minimum Number of Employees with Access to Personal Information and Their Training

   The Company strictly limits employees handing personal information to those who manage personal information. A separate password is issued to such employees, and the password is renewed regularly. The Company also emphasizes the importance of compliance with the Privacy Policy of HOTEL28 by providing regular education for employees with access to personal information.

4. D. Operation of an Exclusive Organization for Protection of Personal Information

   Moreover, an exclusive internal organization for protection of personal information is operated to monitor compliance with the Privacy Policy of Foreheal Hotel, and if related problems are detected, the Company provides efforts to immediately take corrective measures. However, the Company will not be responsible for any damages occurred due to user’s negligence.

10. Contact Information of Chief Privacy Officer and Administrators

You may report all complaints related to personal information protection in using the Company’s service to the Chief Privacy Officer or department in charge. The Company will provide prompt and sufficient answers to your reports.

11. Duty of Notification

When there is an addition, a deletion or a correction of the content of the current Privacy Policy, the Company will inform users through the ‘Notification’ on the website seven (7) days before the implementation of such changes.

1. Date of Notification: April 1st, 2016
2. Date of Implementation: April 1st, 2016