Republic of Korea

The following privacy statement provides additional general information about how ANA's management of personal information fulfils the Korean Privacy Principles.

Purpose of Processing, Items to be processed, Period of Retention and Use of Personal Information

Items of personal information to be processed by ANA with the consent of customers are as follows:

Purpose of Processing	Items to be Processed	Period of Retention and Use
Research and analysis of usage of ANA's services/products Implementation of questionnaires concerning service and products, etc. offered by ANA Development of new services and products	The customer's name, address, telephone number, fax number, email address, employment information (company name, division/department the customer belongs to, title, address, telephone number, fax number), mailing address, passport information, physical and medical information relating to flying, dietary restrictions, payment information including details of credit/debit card and other payment methods, etc. Details of travel plans and arrangements, including flights with ANA and other airlines, accommodations, other transportation arrangements, etc. The customer's ANA Mileage Club membership number, type of membership card, membership status, membership area, mileage status, credit card number and expiration date, usage history of credit card and related information, need for wheelchair or other special arrangement, ﬂight reservation and cancellation information, usage history of flights and other services, etc. Information such as that on how customers use the ANA website and mobile application, including details on cookies, advertising identifiers (IDFA/GAID), location information, unique device identifiers, IP address, details on OS and browser type, etc., and website activity logs by which ANA may be able to identify a specific individual.	ANA Mileage Club members' personal information: Until withdrawal from ANA Mileage Club Other personal information: Required minimum period for the purpose to which customers have consented.
Notification of services and products offered by ANA Operation and management relating to the events and campaigns implemented by ANA, ANA Group companies, partner companies, etc.	The customer's name, address, telephone number, fax number, email address, employment information (company name, division/department the customer belongs to, title, address, telephone number, fax number), and mailing address Details of travel plans and arrangements, including flights with ANA and other airlines, accommodations, other transportation arrangements, etc. The customer's ANA Mileage Club membership number, type of membership card, membership status, membership area, mileage status, credit card number and expiration date, usage history of credit card and related information, need for wheelchair or other special arrangement, ﬂight reservation and cancellation information, usage history of flights and other services, etc.	ANA Mileage Club members' personal information: Until withdrawal from ANA Mileage Club Other personal information: Required minimum period for the purpose to which customers have consented.
Provision of information about the services, products, events and campaigns of ANA, ANA Group companies, partner companies, etc. as well as provision of various pieces of information through methods including direct mail, e-mail magazines, notices, and advertisements	The customer's name, address, telephone number, fax number, email address, employment information (company name, division/department the customer belongs to, title, address, telephone number, fax number), and mailing address Details of travel plans and arrangements, including flights with ANA and other airlines, accommodations, other transportation arrangements, etc. Information such as that on how customers use the ANA website and mobile application, including details on cookies, advertising identifiers (IDFA/GAID), location information, unique device identifiers, IP address, details of OS and browser type, etc., and website activity logs by which ANA may be able to identify a specific individual	Required minimum period for the purpose to which customers have consented.

Items of personal information to be processed by ANA without the consent of customers are as follows:

Legal Basis	Purpose of Processing	Items to be Processed	Period of Retention and Use
Article 15, paragraph (1), item 4 of the Personal Information Protection Act (conclusion and performance of contract)	Reservations, ticket sales, check-in, airport services, and in-flight services with regard to air transport services Reservations, ticket sales, check-in, and airport services for interline transportation, joint acceptance of carriage, codeshare, successive carriage and consigned carriage Service provisions for ANA Mileage Club members Responses to inquiries and requests, etc.	The customer's name, address, telephone number, fax number, email address, employment information (company name, division/department the customer belongs to, title, address, telephone number, fax number), mailing address, passport information, physical and medical information relating to flying, dietary restrictions, payment information including details of credit/debit card and other payment methods, etc. Details of travel plans and arrangements, including flights with ANA and other airlines, accommodations, other transportation arrangements, etc. The customer's ANA Mileage Club membership number, type of membership card, membership status, membership area, mileage status, credit card number and expiration date, usage history of credit card and related information, need for wheelchair or other special arrangement, ﬂight reservation and cancellation information, usage history of flights and other services, etc. Voice recording information and other similar information that can identify a specific individual because it contains the individual's name or for other reasons	ANA Mileage Club members' personal information: Until withdrawal from ANA Mileage Club Personal information of passengers: Until completion of transportation and related services stipulated in Conditions of Carriage for Domestic Flights and Conditions of Carriage for International Flights Personal information on inquiries and requests, etc.: Until completion of the processing of inquiries and requests, etc.
Article 15, paragraph (1), item 6 of the Personal Information Protection Act (legitimate interests)	For settlement after the completion of carriage and the appropriate performance and management of business-related rights and obligations	Fee settlement records, service usage records, billing records, etc.	Personal information of passengers: Until completion of transportation and related services stipulated in Conditions of Carriage for Domestic Flights and Conditions of Carriage for International Flights

In addition to the foregoing, ANA shall preserve personal information within the period provided in relevant laws and regulations, where preservation of personal information is required pursuant to them. The basis for preservation, items for preservation, and period of preservation pursuant to the respective laws and regulations are as follows:

Basis for Preservation	Items for Preservation	Period of Preservation
Article 6 of the Act on the Consumer Protection in Electronic Commerce, etc.	Records related to cancellation of contracts or subscriptions	5 years
	Records related to payment for and supply of goods, etc.	5 years
	Records related to resolution of consumer complaints or disputes	3 years
	Records related to marks and advertisements	6 months
Article 15-2 of the Protection of Communications Secrets Act	Records of logs of the Internet, etc. necessary upon provision of data for confirmation of communications	3 months
Article 85-3 of the Framework Act on National Taxes, and Article 71 of the Value-Added Tax Act	Account books and issued tax invoices or receipts	5 years

Possibility of Disclosure of Sensitive Information and the Method of Selecting Non-Disclosure

Information disclosed while ANA provides the following goods or services may include customers' sensitive information, and customers may select their non-disclosure.

Items of sensitive information: Physical and medical information relating to flying, dietary restrictions
Possibility of disclosure and method of selecting non-disclosure: If customers select special in-flight meals related to religion and health (diabetes, allergies, etc.) such as Kosher, halal and vegetarian meals, and customers' co-travelers made reservations, in-flight meal information may be disclosed at the time of sharing air ticket information to co-travelers (e.g., communication of reservation details by email) by concurrent provision of in-flight meal information. If customers wish to keep their reservation information undisclosed, please reserve separately for the customers yourself and for the co-travelers.

Matters Regarding Entrusting Personal Information Processing

ANA entrusts business operations of personal information processing as follows:

Entrusted Party	Details of Entrusted Business Operations
BlueNet Air Co., Ltd.	Reservations, ticketing, airport handling and ground support operations at airports in the Republic of Korea

Matters Regarding Provision of Personal Information to Third Parties

ANA provides personal information to third parties only where Articles 17 and 18 of the Personal Information Protection Act apply, such as with the consent of the customers, and special provisions under law; and it shall not provide personal information of customers to any third party in any other cases.

If provision to third parties such as the above occurs, ANA shall disclose necessary details to the "Public announcement based on each countries' legal statement" regarding the Republic of Korea pursuant to the Personal Information Protection Act.

Matters Regarding Cross-Border Collection and Transfers of Personal Information

ANA collects and processes personal information outside the Republic of Korea while providing its services.

Country where personal information is collected and processed: Japan

ANA transfers personal information outside the Republic of Korea by entrusting its business operations, etc. as follows. Customers who wish not to have their personal information transferred outside the Republic of Korea may refuse cross-border transfer by contacting the contact point in the "Matters Regarding Department Responsible for Personal Information Protection". However, services of ANA may not be used in such cases.

Entrustment of Processing and Preservation of Personal Information
Legal basis for cross-border transfer	Items of personal information to be transferred	Country to which the personal information is transferred	Transfer date and method	Recipient of personal information (name and contact information)	Purpose of use by the recipient (details of the entrusted business)	Period of retention and use of personal information by the recipient
Article 28-8, paragraph (1), item 3 (entrustment of processing and retention) and 5 (recognition of substantial equality) of the Personal Information Protection Act	The customer's name, address, telephone number, fax number, email address, employment information (company name, division/department the customer belongs to, title, address, telephone number, fax number), mailing address, passport information, physical and medical information relating to flying, dietary restrictions, payment information including details of credit/debit card and other payment methods, etc. Details of travel plans and arrangements, including flights with ANA and other airlines, accommodations, other transportation arrangements, etc. The customer's ANA Mileage Club membership number, type of membership card, membership status, membership area, mileage status, credit card number and expiration date, usage history of credit card and related information, need for wheelchair or other special arrangement, ﬂight reservation and cancellation information, usage history of flights and other services, etc.	In EU	Network transfer at the time of use of air transportation services	Amadeus IT Group S.A. (dataprotection@amadeus.com)	For management of customer information by air transportation services	Until completion of transportation and related services stipulated in Conditions of Carriage for Domestic Flights and Conditions of Carriage for International Flights
Article 28-8, paragraph (1), item 3 (entrustment of processing and retention) of the Personal Information Protection Act	The customer's name, address, telephone number, fax number, email address, employment information (company name, division/department the customer belongs to, title, address, telephone number, fax number), mailing address, passport information, physical and medical information relating to flying, dietary restrictions, payment information including details of credit/debit card and other payment methods, etc. Details of travel plans and arrangements, including flights with ANA and other airlines, accommodations, other transportation arrangements, etc. The customer's ANA Mileage Club membership number, type of membership card, membership status, membership area, mileage status, credit card number and expiration date, usage history of credit card and related information, need for wheelchair or other special arrangement, ﬂight reservation and cancellation information, usage history of flights and other services, etc.	Japan	Network transfer at the time of use of air transportation services	Salesforce (privacy@salesforce.com)	For management of customer information by air transportation services	Until completion of transportation and related services stipulated in Conditions of Carriage for Domestic Flights and Conditions of Carriage for International Flights
Article 28-8, paragraph (1), item 3 (entrustment of processing and retention) of the Personal Information Protection Act	The customer's name, address, telephone number, fax number, email address, employment information (company name, division/department the customer belongs to, title, address, telephone number, fax number), mailing address, passport information, physical and medical information relating to flying, dietary restrictions, payment information including details of credit/debit card and other payment methods, etc. Details of travel plans and arrangements, including flights with ANA and other airlines, accommodations, other transportation arrangements, etc. The customer's ANA Mileage Club membership number, type of membership card, membership status, membership area, mileage status, credit card number and expiration date, usage history of credit card and related information, need for wheelchair or other special arrangement, ﬂight reservation and cancellation information, usage history of flights and other services, etc., need for wheelchair or other special arrangement, ﬂight reservation and cancellation information, usage history of flights and other services, etc.	Japan	Network transfer at the time of use of air transportation services	ANA AIRPORT SERVICES CO., LTD. (03-6428-3035)	For reservations, ticket sales, check-ins, and airport handling by air transportation services	Until completion of transportation and related services stipulated in Conditions of Carriage for Domestic Flights and Conditions of Carriage for International Flights
Article 28-8, paragraph (1), item 3 (entrustment of processing and retention) of the Personal Information Protection Act	The customer's ANA Mileage Club membership number, type of membership card, membership status, membership area, mileage status, credit card number and expiration date, usage history of credit card and related information, etc.	Japan	Network transfer at the time of use of ANA Mileage Club services	ANA X Inc. (privacy@ana-x.co.jp)	For provision of ANA Mileage Club services	Until withdrawal of the ANA Mileage Club membership or termination of relevant business entrustment

Matters Regarding of Destruction Process and Destruction Methods of Personal Information

Where personal information is no longer necessary due to expiration of the period for retaining personal information or achievement of the purpose of processing, etc., ANA shall destroy the relevant personal information without delay. The destruction process and methods of personal information are as follows:

Destruction Process

ANA shall destroy personal information for which the grounds for destruction arise, under the supervision of a personal information protection officer.

Destruction Methods

ANA shall destroy personal information recorded and/or preserved in the form of electronic files so that it may not be recovered or reproduced, and personal information recorded and/or preserved in the form of paper documents shall be shredded or incinerated.

Matters Regarding Measures to Ensure the Safety of Personal Information

ANA implements measures such as the following to ensure the safety of personal information:

Managerial measures: Establishing and implementing internal management plans, periodic employee training, running specialized organizations
Technical measures: Management of authority to access personal information processing systems, establishment of access control systems, and other relevant protection measures, Internet shutdown measures, encryption of personal information, preservation and inspection of access records, establishment and renewal of security programs, and inspection and completion of the vulnerability of personal information processing system
Physical measures: Control of access to computer rooms and data storage rooms, etc., storage of documents and auxiliary storage media, etc. at secure locations with locking measures, safety measures in preparation for disasters and accidents, control of carrying out and carrying in of auxiliary storage media

Matters Regarding Installation and Operation of Personal Information Automatic Collection Tool, and the Denial Thereof

ANA uses "Cookies" to store use information and recall it from time to time, in order to provide individual services and convenience to customers.

Cookies are a small amount of information sent by servers (http) used in website operations to customers' browsers, and they are stored on the customers' computers or mobile devices and automatically transmitted from the customers' browsers to servers when accessing websites.

Customers may change settings such as Cookie permissions and blocks, etc. through the option settings of browsers at any time.

For how to permit/block Cookies on the browsers, please refer to "5. Disabling Cookies" in the "ANA Cookie Policy".

ANA Cookie Policy

Children's Privacy

Where consent is required under the laws and regulations of the Republic of Korea for the provision of personal information in connection with the use of ANA's services by children under 14 years of age, it is necessary to obtain the consent of their legal representative in addition to the consent of the customers themselves. If there is any doubt that ANA collected personal information from children under 14 years of age without the consent of their legal representative, please contact ANA. Legal representatives of children under 14 years of age may request access to, transmission of, correction, erasure, or suspension of the processing of the children's personal information, or withdrawal of consent. Upon receipt of such a request, ANA shall take the necessary measures without delay after confirming that the requester is the legal representative.

Matters Regarding the Rights and Obligations of Customers and their Legal Representatives and How to Exercise Such Rights

Customers may, at any time, request that ANA access, transmit, correct, erase, or suspend the processing of their personal information, or withdraw their consent. Customers may exercise their rights through their legal representatives or other agents such as any person entrusted by the customers. However, if there are any reasons specified in the Personal Information Protection Act such as prohibition or restriction of access by law, exercise of the rights by customers may be subject to some restrictions. Customers may exercise the above rights by contacting ANA's contact point set out in the following paragraph.

Matters Regarding the Department Responsible for Personal Information Protection

If you have any inquiries regarding ANA's business operations involving the handling of personal information by ANA, please contact ANA using the details below:

Department Responsible for Personal Information Protection
- Name: General Administration, Seoul Branch, All Nippon Airways Co., Ltd.
- Contact: seoul@ana.co.jp

Modification of the "ANA Privacy Policy" and the "Public announcement based on each countries' legal statement"

The "ANA Privacy Policy" shall apply from April 1, 2026, and this "Public announcement based on each countries' legal statement" regarding the Republic of Korea shall apply from April 1, 2026, respectively.

ANA updates "ANA Privacy Policy" and this "Public announcement based on each countries' legal statement" from time to time. The latest version will be posted on the ANA website and mobile app, and the dates that they were last updated will be made public. If material modifications regarding the "ANA Privacy Policy" and this "Public announcement based on each countries' legal statement" regarding the Republic of Korea are made, we will announce/notify them via the ANA website and mobile app.