Policy on the Operation and Management of Video Surveillance Equipment

Hyundai DF Co., Ltd. (hereinafter referred to as “Hyundai Duty Free”) hereby informs you through this Policy of the purposes and methods by which the video information it processes is used and managed. Details are as follows.

Article 1 (Legal Basis and Purpose of Installation)

Hyundai Duty Free installs and operates fixed video surveillance equipment pursuant to Article 25(1) of the Personal Information Protection Act for the following purposes:

• Facility safety and fire prevention

• Crime prevention for customer safety

• Prevention of vehicle theft and damage

Article 2 (Installation Status)

Branch	Number of Devices	Installation Location and Coverage
Trade Center Branch	455	Store, warehouse, inside and outside of building
Incheon Airport Branch	237	Store, warehouse

※ The number of devices may change within the scope of installation purposes due to relocation, new installation, or environmental improvements.

Article 3 (Recording Time, Retention Period, Storage Location, and Processing Method)

Branch	Recording Time	Retention Period	Storage Location
Trade Center Branch	24 hours	30 days from recording date	Security Room
Incheon Airport Branch	24 hours	30 days from recording date	Security Room

Processing Method: Matters concerning use beyond purpose, provision to third parties, destruction, and access requests are recorded and managed. Upon expiration of the retention period, data is permanently deleted in a non-recoverable manner (printed materials are shredded or incinerated).

Article 4 (Entrustment and Contact Information)

Branch	Entrusted Company	Contact
Trade Center Branch	CapsTech Co., Ltd.	02-2142-6112
Incheon Airport Branch	Pro Scom Co., Ltd.	032-743-8430

Article 5 (Entrustment of Installation and Management)

Installation and management of fixed video surveillance equipment may be entrusted to specialized service providers.

Article 6 (Method and Location of Access)

1. Method: Contact authorized personnel in advance and visit the branch with required documents.

2. Location: Relevant department of the branch where the information is requested.

Article 7 (Measures Regarding Requests)

Customers may request access, confirmation of existence, or deletion of personal video information at any time. Hyundai Duty Free will take necessary measures without delay. However, requests may be refused where legally justified, and written notice will be provided within 10 days.

Article 8 (Security Measures)

Hyundai Duty Free securely manages personal video information in accordance with internal regulations, including access control, differentiated authorization, secure storage technology, logging of access records, and physical security measures.

Article 9 (Notice of Policy Changes)

In case of amendments due to legal revision, government policy changes, internal policy updates, or security technology changes, Hyundai Duty Free will announce the reasons and details on its website.

Enacted: August 24, 2018

Revised: August 1, 2022 / July 12, 2024 / February 6, 2026 (Latest Revision Date)

Collection of personal information
HDDFS collects only the minimum amount of personal information required for the given task!
- 1. What is “personal information”?
  “Personal information” refers to any information that identifies you. Examples include name, date of birth, phone number, and email address.
- 2. What items of personal information does HDDFS collect?
  Upon membership registration, the applicant’s name, date of birth, passport number, gender, email address, and other items of information are collected to confirm his/her identity. For duty free purchases, the only information collected is that required by Korea’s Customs Act and necessary to undertake the purchase contract (e.g. passport number, departure information, payment details, etc.).
- 3. Is personal information collected for HDDFS events?
  Personal information is collected for events hosted by HDDFS Online or for social media for customers who were informed of and consented to the items of personal information to be collected.
- 4. How is personal information collected?
  Before personal information is collected, an announcement is made of the items of information for which consent will be received. Personal information is collected after the customer has expressed his/her consent by checking the “I consent” box or submitting his/her signature.

Use of personal information
HDDFS uses personal information only for the purposes consented to by the customer!
- 1. How is personal information used?
  The personal information of HDDFS members is used for customer management purposes (e.g. identity confirmation, customer consultation) and to enable the provision/management of services. For duty free purchases, personal information is used for identity confirmation and to maintain compliance with relevant laws.
- 2. Are for-profit advertisements sent to registered members in the form of text messages or emails?
  For-profit advertisements are sent only to members who consented to receiving marketing-related information. HDDFS does not send for-profit advertisements without the customer’s consent. Even if the customer has consented, such information is sent according to a detailed set of guidelines (e.g. including the word “Advertisement” in the email’s title).
- 3. Is personal information used indiscriminately?
  To ensure the protection of customers’ personal information, HDDFS has implemented a number of technical and supervisory measures, including: provision of employee training, conducting of regular self-administered audits, drawing up of in-house management plans, encryption of personal information, creation of hacking policy, restriction of access (offline and online), and storage of access records.

Disclosure of personal information
HDDFS provides personal information to consigned third parties only after obtaining customers’ consent!
- 1. When is personal information disclosed?
  To provide high-quality services to our customers, HDDFS consigns some tasks to third parties (business consignment). Personal information may also be disclosed to utilize the services of HDDFS' partners. Please note that personal information is consigned only after obtaining the consent of the customer!
- 2. What does “business consignment” mean?
  For example, HDDFS consigns the tasks involved in customer consultation (responding to customers’ requests or inquiries) and product sales to external contractors. When consigning such tasks, HDDFS does its best to protect customers’ personal information through such means as regular checks of whether the contractor is abiding by relevant laws and training for the contractor’s employees.
- 3. What does “disclosure to a third party” mean?
  For example, personal information may be disclosed to provide H.Point services, including point accrual and use. Of course, all disclosure is done only after obtaining the customer’s consent! If, however, such disclosure is for a purpose that is required by law, personal information may be disclosed to a third party without the customer’s consent.

Deletion of personal information
HDDFS deletes customers’ personal information, when deemed necessary, promptly and in a secure manner!
- 1. When is personal information deleted?
  HDDFS promptly deletes personal information when: 1) the customer withdraws his/her membership or 2) the retention period to which the customer consented regarding the storage and use of his/her personal information has ended. If, however, the customer has a purchase record, his/her personal information is stored separately for the period of time that is required by Korean law.
- 2. What is a dormant member?
  If a customer does not log in to HDDFS’ website for a certain period of time (one year or three years), his/her personal information is stored separately. In this case, his/her personal information is not used at all!
- 3. How is personal information deleted?
  Personal information that is saved on a computer in electronic format is deleted in such a manner that such information cannot be restored. Personal information in paper format is incinerated or shred very finely so that it is illegible.

Guarantee of rights
HDDFS does its utmost to guarantee the rights of the customer regarding personal information!
- 1. What does it mean to “guarantee the rights of the customer”?
  HDDFS does its best to adequately guarantee the customer’s rights. Whenever the customer requests the editing, deletion, or granting of permission to view one’s personal information, HDDFS complies with such request in a timely manner (after completing the relevant confirmation procedure).
- 2. How can I edit my personal information or withdraw membership?
  Please refer to the following regarding the editing of personal information or withdrawal of membership via our website or mobile app!
  - Computer (website): Click the person-shaped icon (My Hyundai) at the upper right after logging in → Follow the downward arrow next to “Cash points/gift card cash points” at the lower right of the order details box → Click “Basic Information Management” at the lower left → Enter password → Edit personal information (or withdraw membership)
  - Mobile app: Click the person-shaped icon at the lower right after logging in → Click the upside-down triangle next to “Orders” at the top of the screen → Go to “Basic Information Management” (fourth from bottom) → Enter password → Edit personal information (or withdraw membership)

※ For more information on how HDDFS handles personal information, feel free to read the “ Personal Information Processing Guideline ” (link can be found at the bottom of HDDFS’ website)!
Go to HDDFS’ Personal Information Processing Guideline >