Privacy Policy

Yachttale Co., Ltd. (the "Company"), which operates the The Bay 101 Yacht Tour website and yacht tour services, establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act (개인정보 보호법) in order to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

Article 1 (Personal Information Processed and Purposes of Processing)

The Company does not offer membership registration on its website and processes only the minimum personal information needed to provide its services. Personal information is not used for any purpose other than those set out below. If a purpose changes, the Company will take the necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

Article 2 (Processing and Retention Period of Personal Information)

The Company destroys personal information without delay once the purpose of processing has been achieved. However, where retention is required by the relevant laws, the information is kept for the periods set out below.

Details of enquiries are destroyed once the enquiry has been dealt with. However, if a dispute arises, they are kept until the dispute is resolved.

Article 3 (Provision of Personal Information to Third Parties)

The Company processes the personal information of data subjects only within the scope of the purposes stated in Article 1 and does not provide it to third parties except in the following cases.

1. Where the data subject has given separate consent
2. Where there are special provisions in law, or where it is unavoidable in order to comply with legal obligations (including where the Korea Coast Guard or other relevant authorities request boarding records in accordance with the law)
3. Where it is urgently necessary to protect the life, body or property of the data subject or a third party

Article 4 (Outsourcing of Personal Information Processing)

To provide its services smoothly, the Company outsources personal information processing tasks as follows.

When entering into an outsourcing contract, the Company sets out, in accordance with Article 26 of the Personal Information Protection Act, matters concerning the prohibition of processing personal information for purposes other than the outsourced tasks, technical and managerial safeguards, restrictions on re-outsourcing, management and supervision of the contractor, and liability such as compensation for damages, and supervises whether the contractor processes personal information securely. If the outsourced tasks or the contractor change, the Company will give notice through this Privacy Policy.

Article 5 (Procedure and Method of Destroying Personal Information)

1. Destruction procedure: Personal information whose retention period has expired or whose purpose of processing has been achieved is destroyed without delay. Personal information retained under the law is stored separately from other personal information.
2. Destruction method: Electronic files are deleted using technical methods that make recovery impossible, and paper documents such as boarding reports are shredded or incinerated.

Article 6 (Rights and Obligations of Data Subjects and How to Exercise Them)

1. Data subjects may at any time ask the Company to give access to, correct or delete their personal information, or to suspend its processing.
2. Rights may be exercised by telephone, email or other means, and the Company will act on the request without delay.
3. Rights may also be exercised through a representative, such as a legal representative or a person authorised by the data subject. In this case, a power of attorney must be submitted.
4. Deletion cannot be requested for personal information that other laws specify must be collected, and requests for access or suspension of processing may be restricted where there are special provisions in law or in similar cases.
5. The personal information of children under 14 is processed with the consent of their legal representative.

Article 7 (Measures to Ensure the Security of Personal Information)

1. Managerial measures: The Company keeps the number of staff who handle personal information to a minimum and trains them regularly.
2. Technical measures: The Company manages access rights to its personal information processing systems and installs and updates security software.
3. Physical measures: Documents containing personal information, such as boarding reports, are kept in a place with a lock.

Article 8 (Installation, Operation and Refusal of Automatic Collection Devices)

The Company uses Google Analytics, which uses cookies, to analyse website usage statistics. In this process, visit records and device and browser information may be transferred to and processed on the servers of Google LLC (United States).

Article 9 (Chief Privacy Officer)

The Company has designated a Chief Privacy Officer, as set out below, who takes overall responsibility for personal information processing and handles complaints and remedies for damage from data subjects in relation to personal information processing.

Article 10 (Remedies for Infringement of Rights)

To obtain a remedy for an infringement of personal information, data subjects may apply to the following organisations for dispute resolution or advice.

Article 11 (Changes to the Privacy Policy)

This Privacy Policy applies from 1 October 2026. If any content is added, deleted or amended, notice will be given on the website from 7 days before the change takes effect.

Date of notice: 30 September 2026  ·  Effective date: 1 October 2026