dining brands group

The Dining Brands Group Personal Information Processing Policy

The Dining Brands Group hereby establishes and discloses personal information processing policy to protect personal information of information holder (customer) and promptly and smoothly process any relevant complaints or concerns in accordance with the Article 30 of Personal Information Protection Act.

①Purpose of processing personal information
The Dining Brands Group processes personal information for following purposes and does not use information for purposes other than below.

To provide information regarding signing up and inquiries about brands under The Dining Brands Group.

To receive and process reports received through the Ethics Management Reporting System.

②Period of processing and retaining personal information

The Dining Brands Group processes and possesses personal information within the period of retention and use to which an information holder gave a consent when asked about information collection or such period under the law.

Details about a period of processing and retaining personal information are as below.

Customer signup and management: from receiving a service inquiry to concluding a franchise agreement, provided that however until credits and debts are settled in the event there are outstanding credits and debts relationship

Content of reporting received through the Ethics Management Reporting System: until the purpose of processing personal information is achieved

Records of contract signing, withdrawing arrangements, payments and supply of goods in e-commerce: 5 years

③Third-party provision of personal information
The Dining Brands Group does not provide personal information to a third-party person except when getting a separate consent from an information holder or a case that falls under the Article 17 of Personal Information Protection Act.

④Rights and obligations of information holder(s) and legal agent(s) and method of exercise
Information holder(s) may exercise their rights related to personal information protection anytime against the Dining Brands Group in each of the following cases.

A. To demand to access personal information
B. To demand revision of errors, etc. of personal information if any.
C. To demand deletion of information
D. To demand suspension of processing

⑤Items of personal information to be processed
The Dining Brands Group processes following items of personal information.

Inquiry about overseas business (mandatory) name of a company’s contact person, phone number, title, email address

Reporting through the Ethics Management Reporting System: (mandatory) name, mobile no., email address, content of a report

⑥Destruction of personal information

The Dining Brands Group will immediately destroy personal information when the personal information becomes unnecessary because the period of retention expired, processing purpose is achieved, etc.

The Dining Brands Group will destroy personal information with below methods.

Electronic file: file deletion and formatting of storage such as a disc

Manual written document: to shred or burn

⑦Measures to ensure security of personal information
The Dining Brands Group is taking below measures to ensure the security of personal information.

Managerial measures: to establish and implement internal management plan, to conduct regular training of employees and staff

Technological measures: to manage access rights such as setting passwords of personal information processing system (or a computer that stores personal information), to install security program such as vaccine software, to encrypt files that store personal information

Physical measure: to lock or control entry to a place that keeps or stores personal information

⑧A personal information protection officer
The Dining Brands Group designates a personal information protection officer as below who would take general responsibility about personal information processing work and address complaints of information holders related to personal information processing and damage recovery.

Personal information protection officer: a head of compliance office

Person responsible for personal information protection: personal information protection part leader at compliance office

Contact no: 02-6204-3406

Email: privacy@bhc.co.kr

Addendum
This personal information processing policy will be applied from December 27, 2024.