The Supplemental Privacy Policy for South Korea effective 17 June 2025
The Supplemental Privacy Policy for South Korea effective 5 February 2024
The Supplemental Privacy Policy for South Korea effective 1 September 2023
The Supplemental Privacy Policy for South Korea effective 13 October 2022
The Supplemental Privacy Policy for South Korea effective 12 November 2021
17 June 2025
SUPPLEMENTAL PRIVACY POLICY FOR REPUBLIC OF KOREA
This supplement to our global privacy policy applies to the processing of personal information in the Republic of Korea (“Korea”) or of Korean residents and shall be read in conjunction with our Privacy Policy.
1. Collection and Use Statement of Personal Information
The data controller of your personal information is The Walt Disney Company (Korea), LLC (“TWDC Korea”). TWDC Korea collects and uses the following information from you for the purposes listed below:
A. List per the purpose of collection and use
(1) The Purpose of Collection and Use of Personal Information: Subscription and access to any services and products of the Walt Disney Family of Companies including Disney+ service (for example user authentication and verification to find/reset an account or password including re-subscription upon cancellation of service).
Items of Personal Information Being Collected: Email address, Username (profile names), Password, IP address and related internet transaction data, Device and browser identifiers and related information, Date of birth, Gender, Billing Address, Home Address and Telephone number (including mobile number).
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your account or as required by the relevant laws and regulations.
(2) The Purpose of Collection and Use of Personal Information: Provision and operation of the Disney+ service (including content and feature delivery, personalization, security and protection against improper usage, content acquisition and development, maintenance, and improvement).
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, Date of birth, Gender, User activity and playback data, Subscription and entitlement information, Service settings and configuration.
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations.
(3) The Purpose of Collection and Use of Personal Information: Payment processing, including invoicing, processing, re-subscription upon cancellation of service and refunds.
Items of Personal Information Being Collected: Payment information including name, credit card or other payment method number, location information, CVV security code, and expiration date, Date of birth, PIN Code, First 2 digits of credit card PIN, Transaction history and related data, Subscription and entitlement information.
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your subscription or as required by the relevant laws and regulations.
(4) The Purpose of Collection and Use of Personal Information: Customer service.
Items of Personal Information Being Collected: Email address, Username (profile names), First and last name, Browser, device, account identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Payment and transaction information, Service settings and configuration, Home Address, Billing Address, and Telephone number (including mobile number).
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations.
(5) The Purpose of Collection and Use of Personal Information: Adult verification by verifying identity and age (including for subscription to the service and accessing particular content).
Items of Personal Information Being Collected: Name, Date of birth, Gender, Citizen/foreigner, Mobile number, Mobile carriers, Encrypted connecting information (CI), Duplicate subscription verification information (DI).
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations.
(6) The Purpose of Collection and Use of Personal Information: Marketing and advertising (including, email marketing (subject to obtaining necessary consents); push notifications and in-app messaging; and other marketing services like retargeting, acquisition, modeling, and suppression).
Items of Personal Information Being Collected: Email address, IP Address and related internet transaction data, Browser and device identifiers and related information, User activity and playback data, Subscription and entitlement information, Date of birth and Gender.
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose.
(7) The Purpose of Collection and Use of Personal Information: Research and analytics.
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Date of birth and Gender.
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose.
(8) The Purpose of Collection and Use of Personal Information: Advertisement Service Providers.
Items of Personal Information Being Collected: IP address and related internet transaction data, Device and browser identifiers and related information, User activity data.
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose.
(9) The Purpose of Collection and Use of Personal Information: User choice management.
Items of Personal Information Being Collected: IP address, internet transaction data, cookies, device and browser identifiers and related information, user activity data, Date of birth and Gender.
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations.
B. Right to Refuse Consent/ Disadvantage upon any Refusal to Consent
You may decline our request to collect and use your personal information. However, please note that you may not be able to use or may be restricted from using Disney+ without providing your personal information.
2. Sharing of information with Third Parties for provision of Disney+ services
TWDC Korea entrusts the processing of following personal information to third parties to provide D+ services to you:
Entrusted Parties for Personal Information Handling
A. Local Companies
(1) Name of the Company: Korea Credit Bureau
Details of the Entrusted work: Support services of adult verification and Identify verification.
(2) Name of the Company: NHN KCP Corp.
Details of the Entrusted work: Support services of online payments and Credit card information validation.
(3) Name of the Company: Kakao Corp., Naver Corp.
Details of the Entrusted work: Support targeted ads based on user behavior, use browser cookie or mobile advertiser id (e.g., ADID, IDFA).
(4) Name of the Company: Transcosmos Korea Inc.
Details of the Entrusted work: Customer service support.
(5) Name of the Company: Planets Co., Ltd., Webs Creative Co., Ltd., Zestad Co., Ltd., Connect B Global Co., Ltd., JXD Entertainment Co., Ltd., Hi Difference Co., Ltd.
Details of the Entrusted work: Marketing event management, Execution of marketing event and sending giveaways or products, Planning of marketing event and processing of related works.
B. Cross-border transfer of personal information
Right to refuse cross-border transfer and disadvantages for refusal of transfer: You may choose not to transfer your personal information overseas by deleting your account. In such an event you will not be able to use or may be restricted from signing up to any product or services of the Walt Disney Family of Companies including access to Disney+.
(1) Name of the Company: Akamai.
Contact: Akamai's Privacy Team.
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data.
Purpose: Content delivery, caches busting, and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(2) Name of the Company: Fastly.
Contact: Fastly’s Privacy Team.
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data.
Purpose: Content delivery and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(3) Name of the Company: Century Link.
Contact: Privacy@CenturyLink.com.
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data.
Purpose: Content delivery and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(4) Name of the Company: Conviva.
Contact: privacy@conviva.com.
Personal information to be transferred: IP address, and related internet transaction data, cookies, device and browser identifiers and information, user activity and playback data, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Video playback and engagement information and other related analytics.
Country: United States.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(5) Name of the Company: Braze.
Contact: Privacy Request.
Personal information to be transferred: IP address and related internet transaction data; device identifiers; user activity and other account data, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: In app and push marketing and service notifications.
Country: United States, Singapore, Germany, Japan, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(6) Name of the Company: Google Double Click, Floodlight.
Contact: Privacy Help Centre.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing (including paid media optimization and ad tracking).
Country: Various countries. See global services information.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(7) Name of the Company: Flashtalking.
Contact: privacy@flashtalking.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States, United Kingdom, Germany, Netherlands, France, Italy, Poland, Australia, Singapore, Hong Kong.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(8) Name of the Company: Microsoft.
Contact: Privacy Help.
Personal information to be transferred: IP Address; device information, user activity; crash information; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Crash analytics for Xbox version of application only.
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(9) Name of the Company: New Relic.
Contact: privacy@newrelic.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Analytics, measurement of application and services quality and health
Country: United States, European Union.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(10) Name of the Company: Optimizely.
Contact: privacy@optimizely.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: A/B & Multi-variant testing.
Country: United States, European Union, Vietnam, Australia, South Africa.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(11) Name of the Company: TRUSTe.
Contact: privacy@trustarc.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: User choice management.
Country: United States, Ireland, Germany.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(12) Name of the Company: Amazon Web Services.
Contact: aws-korea-privacy@amazon.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Infrastructure and IT support and related services (including data storage and management).
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(13) Name of the Company: ServiceNow.
Contact: privacy@servicenow.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Providing customer support.
Country: United States, Canada, South Korea, Singapore, Germany, Switzerland, Netherlands, Ireland, United Kingdom, Japan, Australia, Brazil.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(14) Name of the Company: SnowFlake.
Contact: privacy@snowflake.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Infrastructure and IT support and related services (including data storage and management).
Country: Various countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(15) Name of the Company: Salesforce.
Contact: Privacy Help.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing (including email marketing) and Customer Support.
Country: Various countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(16) Name of the Company: Adobe.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Analytics and user choice management.
Country: United States, Ireland.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(17) Name of the Company: Qualtrics.
Contact: privacy@qualtrics.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Surveys and user communications.
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(18) Name of the Company: Zendesk.
Contact: privacy@zendesk.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Customer Support.
Country: United States, European Economic Area, Japan, Australia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(19) Name of the Company: Facebook (Meta).
Contact: korealocalagent@support.facebook.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(20) Name of the Company: Twitter.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, Ireland.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(21) Name of the Company: Google Ads.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(22) Name of the Company: Microsoft Bing.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, Australia, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(23) Name of the Company: Yahoo Gemini.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(24) Name of the Company: Apple Search Ads.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(25) Name of the Company: Oath.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(26) Name of the Company: Amazon DSP.
Contact: Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(27) Name of the Company: The Trade Desk.
Contact: privacy@thetradedesk.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(28) Name of the Company: Impact Radius.
Contact: privacy@impact.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Affiliate marketing and related analytics and operations.
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(29) Name of the Company: Validity (Return Path).
Contact: privacy@validity.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Email management.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(30) Name of the Company: Movable Ink.
Contact: privacy@movableink.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Email management.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(31) Name of the Company: Litmus.
Contact: privacy@litmus.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Email rendering.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(32) Name of the Company: Sentry.io.
Contact: security@sentryio.com.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Analytics (including crash reporting).
Country: United States, European Union.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(33) Name of the Company: Apple.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(34) Name of the Company: Google (Android TV, Phones, Tablets).
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(35) Name of the Company: Amazon (Fire TV, Fire Tablet).
Contact: aws-korea-privacy@amazon.com.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(36) Name of the Company & Contact information: LG (TV).
Contact: caprivacy@lge.com.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, South Korea.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(37) Name of the Company: Samsung (TV).
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, South Korea, European Union, Australia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(38) Name of the Company: Sony (Playstation).
Contact: Help.
Personal information to be transferred: IP address and related internet transaction data;
device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, United Kingdom, Japan.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(39) Name of the Company: Microsoft Xbox.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(40) Name of the Company: Adyen, N.V.
Contact: dpo@adyen.com.
Personal information to be transferred: Payment card information such as primary account number, card verification code and cardholder name, related transaction data, and other information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Payment transaction related services, which include Processing of payment transactions, fraud detection, and other related services.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: When necessary for a purpose.
(41) Name of the Company: TikTok Inc.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(42) Name of the Company: ROKT Corp.
Contact: privacy@rokt.com.
Personal information to be transferred: IP address and related internet transaction data;
cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, European Union, Singapore, United Kingdom, Australia, Japan.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(43) Name of the Company: Oracle America Inc. (Bluekai).
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy .
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(44) Name of the Company: Webhelp S.A.S.
Contact: privacy@webhelp.com.
Personal information to be transferred: Name; email address; payment method; last 4 digits of payment card; device types; order number and other information to handle customer service.
Purpose: Customer service supports via phone and chat.
Country: France, South Korea, Malaysia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations.
(45) Name of the Company: Support Services Group.
Contact: privacy@s2g.net.
Personal information to be transferred: Name, email address, payment method, last 4 digits of payment card, device types, order number and other information to handle customer service.
Purpose: Customer service supports via phone and chat.
Country: United States, Philippines, Canada, South Korea, Malaysia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations.
(46) Name of the Company: InMobi.
Contact: privacy@inmobi.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States, European Union, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(47) Name of the Company: Traffic Guard.
Contact: privacy@trafficguard.ai.
Personal information to be transferred: IP address and related internet transaction data;
browser and device identifiers and information; user activity data.
Purpose: Content delivery, caches busting, and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(48) Name of the Company: The Walt Disney Company Group of Companies
Contact: twdc.kr.dpo@disney.com
Personal Information to be transferred: Email address, Username (profile names), First and last name, password, IP Address and related internet transaction data, Date of birth, Gender, Billing Address, Home Address, Payment method and related information, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration
Purpose: Disney+ Service operation and provision, Service access provision and management, Security management, Payment processing, Customer support, Communication with users, Research and analytics, Product and service improvement, Marketing and promotion (in case of email communication, subject to required consent), Development of contents, including legal compliance.
Country: Various countries. See Data Controller for each territory.
Transfer Date/ Transfer Method: When using the service or necessary for purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations.
3. Provision of Information to Third Parties and Overseas transfer of Personal Information
TWDC Korea will not share your information any other third party (other than for provision of D+ services as listed above) without your prior consent. If you have consented to a provision of your information to any third party, the following details apply to you:
A. Local Companies
Recipient: Credit card companies: 1. KB Kookmin Card Corp., 2. BC Card Co., Ltd., 3. Lottecard Co., Ltd., 4. NongHyup Bank Co., Ltd. (NH Nonghyup Card), 5. Hyundai Card Corp., 6. Shinhancard Co., Ltd., 7. KEB Hana Card Co., Ltd., 8. Samsung Card Co., Ltd., and other credit card companies).
Purpose of Provision: The purpose of provision of personal information is to proceed with verifying the validity of credit card information to be used for payment service and to make payment for the Disney+ service.
Personal Information to be Provided: For credit card information validation: Credit card number, expiration date and year, Date of Birth, first 2 digits of password/ For payment service: Credit card number, expiration date and year.
Retention Period: The personal information provided shall not be separately stored by the third parties, after processing for the purpose set forth herein, as it is already possessed.
B. Cross-border Transferring/Provision
Third parties receiving personal information: The Walt Disney Family of Companies.
Items of personal information to be transferred: Email address, Username (profile names), First and last name, password, IP Address and related internet transaction data, Date of birth, Gender, Billing Address, Home Address, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration.
Country to which personal information is transferred: United States.
Method, date and time of transfer: Transmitted through the network when using the service.
Purpose of use: Creation of unified Disney account; subscription and access to products and services of the Walt Disney family of Companies; provision and operation of the service, payment processing, customer service, marketing and advertising (subject to obtaining necessary consents), research and development, business processing, advertising partners, any other purpose that may be required for the operation and management of the products and services.
Retention and use period: Retained until request made for permanent deletion of your membership/subscription or as required by the relevant laws and regulations.
Right to refuse consent and disadvantages for refusal of consent: By not signing up for services of The Walt Disney Family of Companies or permanently deleting your account, you may refuse to our overseas provision of personal information as above. However, if you refuse, you may not be able to create a Disney account or log in to your account and you may not be able to access the products and services provided by The Walt Disney Family of Companies.
4. Your Control and Choices
Your Controls and Choices as detailed in the Privacy Policy shall also apply to the legal representatives in case of minors.
5. Data Security, Integrity and Retention
As specified in the Privacy Policy the security, integrity and confidentiality of your information are extremely important to us. We take the following measures to ensure the safety of personal information.
a. Administrative Measures: For example, establishment and implementation of internal management plans, regular training on protection of your personal information.
b. Technical Measures: For example, management of access rights to personal information processing system, installation of access control system, encryption of unique identification information, installation of security programs.
c. Physical Measures: For example, limit access to personal information to The Walt Disney Family of Companies as listed out in the Privacy Policy. Those with access have strict confidentiality obligations under the contract, and breach of this obligation may result in sanctions or termination of the contract.
We retain your personal information in accordance with the Privacy Policy, and for fulfillment of the purpose of collection and use. Some data may be retained when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, and storage of financial records etc. We retain following personal information in accordance with applicable laws and regulations.
6. Data Deletion
Except for cases in which we obtain separate consent from you or are obligated to preserve your personal information in accordance with relevant statutes, we will destroy your personal information with the approval of Personal Information Protection Officer when it becomes nonessential to store them, such as once we have met the required needs to process your personal information. Upon deletion, we will destroy your personal information recorded and stored in the form of electronic files or hard copies so that the records cannot be reproduced.
7. Personal Information Protection Officer
If you have a comment or question about this Policy, please contact our Personal Information Protection Officer details provided below:
Name: Hana Kim
Contact Details: TWDC.KR.DPO@disney.com
Contact number: 02-3490-2800
You can also make an access or correction request or a complaint in relation to personal information by sending an email to TWDC.KR.DPO@disney.com.
8. Effective date of this Policy
This Supplemental Privacy Policy for Republic of Korea will be effective from February 5, 2024.
5 February 2024
SUPPLEMENTAL PRIVACY POLICY FOR REPUBLIC OF KOREA
This supplement to our global privacy policy applies to the processing of personal information in the Republic of Korea (“Korea”) or of Korean residents and shall be read in conjunction with our Privacy Policy.
1. Collection and Use Statement of Personal Information
The data controller of your personal information is The Walt Disney Company (Korea), LLC (“TWDC Korea”). TWDC Korea collects and uses the following information from you for the purposes listed below:
A. List per the purpose of collection and use
(1) The Purpose of Collection and Use of Personal Information: Subscription and access to any services and products of the Walt Disney Family of Companies including Disney+ service (for example user authentication and verification to find/reset an account or password including re-subscription upon cancellation of service).
Items of Personal Information Being Collected: Email address, Username (profile names), Password, IP address and related internet transaction data, Device and browser identifiers and related information, Date of birth, Gender, Billing Address, Home Address and Telephone number (including mobile number).
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your account or as required by the relevant laws and regulations.
(2) The Purpose of Collection and Use of Personal Information: Provision and operation of the Disney+ service (including content and feature delivery, personalization, security and protection against improper usage, content acquisition and development, maintenance, and improvement).
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, Date of birth, Gender, User activity and playback data, Subscription and entitlement information, Service settings and configuration.
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations.
(3) The Purpose of Collection and Use of Personal Information: Payment processing, including invoicing, processing, re-subscription upon cancellation of service and refunds.
Items of Personal Information Being Collected: Payment information including name, credit card or other payment method number, location information, CVV security code, and expiration date, Date of birth, PIN Code, First 2 digits of credit card PIN, Transaction history and related data, Subscription and entitlement information.
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your subscription or as required by the relevant laws and regulations.
(4) The Purpose of Collection and Use of Personal Information: Customer service.
Items of Personal Information Being Collected: Email address, Username (profile names), First and last name, Browser, device, account identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Payment and transaction information, Service settings and configuration, Home Address, Billing Address, and Telephone number (including mobile number).
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations.
(5) The Purpose of Collection and Use of Personal Information: Adult verification by verifying identity and age (including for subscription to the service and accessing particular content).
Items of Personal Information Being Collected: Name, Date of birth, Gender, Citizen/foreigner, Mobile number, Mobile carriers, Encrypted connecting information (CI), Duplicate subscription verification information (DI).
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations.
(6) The Purpose of Collection and Use of Personal Information: Marketing and advertising (including, email marketing (subject to obtaining necessary consents); push notifications and in-app messaging; and other marketing services like retargeting, acquisition, modeling, and suppression).
Items of Personal Information Being Collected: Email address, IP Address and related internet transaction data, Browser and device identifiers and related information, User activity and playback data, Subscription and entitlement information, Date of birth and Gender.
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose.
(7) The Purpose of Collection and Use of Personal Information: Research and analytics.
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Date of birth and Gender.
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose.
(8) The Purpose of Collection and Use of Personal Information: Advertisement Service Providers.
Items of Personal Information Being Collected: IP address and related internet transaction data, Device and browser identifiers and related information, User activity data.
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose.
(9) The Purpose of Collection and Use of Personal Information: User choice management.
Items of Personal Information Being Collected: IP address, internet transaction data, cookies, device and browser identifiers and related information, user activity data, Date of birth and Gender.
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations.
B. Right to Refuse Consent/ Disadvantage upon any Refusal to Consent
You may decline our request to collect and use your personal information. However, please note that you may not be able to use or may be restricted from using Disney+ without providing your personal information.
2. Sharing of information with Third Parties for provision of Disney+ services
TWDC Korea entrusts the processing of following personal information to third parties to provide D+ services to you:
Entrusted Parties for Personal Information Handling
A. Local Companies
(1) Name of the Company: Korea Credit Bureau
Details of the Entrusted work: Support services of adult verification and Identify verification.
(2) Name of the Company: NHN KCP Corp.
Details of the Entrusted work: Support services of online payments and Credit card information validation.
(3) Name of the Company: Kakao Corp., Naver Corp.
Details of the Entrusted work: Support targeted ads based on user behavior, use browser cookie or mobile advertiser id (e.g., ADID, IDFA).
(4) Name of the Company: Transcosmos Korea Inc.
Details of the Entrusted work: Customer service support.
(5) Name of the Company: Planets Co., Ltd., Webs Creative Co., Ltd., Zestad Co., Ltd., Connect B Global Co., Ltd., JXD Entertainment Co., Ltd., Hi Difference Co., Ltd.
Details of the Entrusted work: Marketing event management, Execution of marketing event and sending giveaways or products, Planning of marketing event and processing of related works.
B. Cross-border transfer of personal information
Right to refuse cross-border transfer and disadvantages for refusal of transfer: You may choose not to transfer your personal information overseas by deleting your account. In such an event you will not be able to use or may be restricted from signing up to any product or services of the Walt Disney Family of Companies including access to Disney+.
(1) Name of the Company: Akamai.
Contact: Akamai's Privacy Team.
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data.
Purpose: Content delivery, caches busting, and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(2) Name of the Company: Fastly.
Contact: Fastly’s Privacy Team.
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data.
Purpose: Content delivery and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(3) Name of the Company: Century Link.
Contact: Privacy@CenturyLink.com.
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data.
Purpose: Content delivery and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(4) Name of the Company: Conviva.
Contact: privacy@conviva.com.
Personal information to be transferred: IP address, and related internet transaction data, cookies, device and browser identifiers and information, user activity and playback data, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Video playback and engagement information and other related analytics.
Country: United States.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(5) Name of the Company: Braze.
Contact: Privacy Request.
Personal information to be transferred: IP address and related internet transaction data; device identifiers; user activity and other account data, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: In app and push marketing and service notifications.
Country: United States, Singapore, Germany, Japan, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(6) Name of the Company: Google Double Click, Floodlight.
Contact: Privacy Help Centre.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing (including paid media optimization and ad tracking).
Country: Various countries. See global services information.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(7) Name of the Company: Flashtalking.
Contact: privacy@flashtalking.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States, United Kingdom, Germany, Netherlands, France, Italy, Poland, Australia, Singapore, Hong Kong.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(8) Name of the Company: Microsoft.
Contact: Privacy Help.
Personal information to be transferred: IP Address; device information, user activity; crash information; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Crash analytics for Xbox version of application only.
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(9) Name of the Company: New Relic.
Contact: privacy@newrelic.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Analytics, measurement of application and services quality and health
Country: United States, European Union.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(10) Name of the Company: Optimizely.
Contact: privacy@optimizely.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: A/B & Multi-variant testing.
Country: United States, European Union, Vietnam, Australia, South Africa.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(11) Name of the Company: TRUSTe.
Contact: privacy@trustarc.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: User choice management.
Country: United States, Ireland, Germany.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(12) Name of the Company: Amazon Web Services.
Contact: aws-korea-privacy@amazon.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Infrastructure and IT support and related services (including data storage and management).
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(13) Name of the Company: ServiceNow.
Contact: privacy@servicenow.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Providing customer support.
Country: United States, Canada, South Korea, Singapore, Germany, Switzerland, Netherlands, Ireland, United Kingdom, Japan, Australia, Brazil.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(14) Name of the Company: SnowFlake.
Contact: privacy@snowflake.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Infrastructure and IT support and related services (including data storage and management).
Country: Various countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(15) Name of the Company: Salesforce.
Contact: Privacy Help.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing (including email marketing) and Customer Support.
Country: Various countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(16) Name of the Company: Adobe.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Analytics and user choice management.
Country: United States, Ireland.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(17) Name of the Company: Qualtrics.
Contact: privacy@qualtrics.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Surveys and user communications.
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(18) Name of the Company: Zendesk.
Contact: privacy@zendesk.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Customer Support.
Country: United States, European Economic Area, Japan, Australia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(19) Name of the Company: Facebook (Meta).
Contact: korealocalagent@support.facebook.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(20) Name of the Company: Twitter.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, Ireland.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(21) Name of the Company: Google Ads.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(22) Name of the Company: Microsoft Bing.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, Australia, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(23) Name of the Company: Yahoo Gemini.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(24) Name of the Company: Apple Search Ads.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(25) Name of the Company: Oath.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(26) Name of the Company: Amazon DSP.
Contact: Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(27) Name of the Company: The Trade Desk.
Contact: privacy@thetradedesk.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(28) Name of the Company: Impact Radius.
Contact: privacy@impact.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Affiliate marketing and related analytics and operations.
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(29) Name of the Company: Validity (Return Path).
Contact: privacy@validity.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Email management.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(30) Name of the Company: Movable Ink.
Contact: privacy@movableink.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Email management.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(31) Name of the Company: Litmus.
Contact: privacy@litmus.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Email rendering.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(32) Name of the Company: Sentry.io.
Contact: security@sentryio.com.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Analytics (including crash reporting).
Country: United States, European Union.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(33) Name of the Company: Apple.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(34) Name of the Company: Google (Android TV, Phones, Tablets).
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(35) Name of the Company: Amazon (Fire TV, Fire Tablet).
Contact: aws-korea-privacy@amazon.com.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(36) Name of the Company & Contact information: LG (TV).
Contact: caprivacy@lge.com.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, South Korea.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(37) Name of the Company: Samsung (TV).
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, South Korea, European Union, Australia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(38) Name of the Company: Sony (Playstation).
Contact: Help.
Personal information to be transferred: IP address and related internet transaction data;
device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, United Kingdom, Japan.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(39) Name of the Company: Microsoft Xbox.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose.
(40) Name of the Company: Adyen, N.V.
Contact: dpo@adyen.com.
Personal information to be transferred: Payment card information such as primary account number, card verification code and cardholder name, related transaction data, and other information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Payment transaction related services, which include Processing of payment transactions, fraud detection, and other related services.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: When necessary for a purpose.
(41) Name of the Company: TikTok Inc.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(42) Name of the Company: ROKT Corp.
Contact: privacy@rokt.com.
Personal information to be transferred: IP address and related internet transaction data;
cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, European Union, Singapore, United Kingdom, Australia, Japan.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(43) Name of the Company: Oracle America Inc. (Bluekai).
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy .
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(44) Name of the Company: Webhelp S.A.S.
Contact: privacy@webhelp.com.
Personal information to be transferred: Name; email address; payment method; last 4 digits of payment card; device types; order number and other information to handle customer service.
Purpose: Customer service supports via phone and chat.
Country: France, South Korea, Malaysia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations.
(45) Name of the Company: Support Services Group.
Contact: privacy@s2g.net.
Personal information to be transferred: Name, email address, payment method, last 4 digits of payment card, device types, order number and other information to handle customer service.
Purpose: Customer service supports via phone and chat.
Country: United States, Philippines, Canada, South Korea, Malaysia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations.
(46) Name of the Company: InMobi.
Contact: privacy@inmobi.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy. Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States, European Union, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(47) Name of the Company: Traffic Guard.
Contact: privacy@trafficguard.ai.
Personal information to be transferred: IP address and related internet transaction data;
browser and device identifiers and information; user activity data.
Purpose: Content delivery, caches busting, and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose.
(48) Name of the Company: The Walt Disney Company Group of Companies
Contact: twdc.kr.dpo@disney.com
Personal Information to be transferred: Email address, Username (profile names), First and last name, password, IP Address and related internet transaction data, Date of birth, Gender, Billing Address, Home Address, Payment method and related information, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration
Purpose: Disney+ Service operation and provision, Service access provision and management, Security management, Payment processing, Customer support, Communication with users, Research and analytics, Product and service improvement, Marketing and promotion (in case of email communication, subject to required consent), Development of contents, including legal compliance.
Country: Various countries. See Data Controller for each territory.
Transfer Date/ Transfer Method: When using the service or necessary for purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations.
3. Provision of Information to Third Parties and Overseas transfer of Personal Information
TWDC Korea will not share your information any other third party (other than for provision of D+ services as listed above) without your prior consent. If you have consented to a provision of your information to any third party, the following details apply to you:
A. Local Companies
Recipient: Credit card companies: 1. KB Kookmin Card Corp., 2. BC Card Co., Ltd., 3. Lottecard Co., Ltd., 4. NongHyup Bank Co., Ltd. (NH Nonghyup Card), 5. Hyundai Card Corp., 6. Shinhancard Co., Ltd., 7. KEB Hana Card Co., Ltd., 8. Samsung Card Co., Ltd., and other credit card companies).
Purpose of Provision: The purpose of provision of personal information is to proceed with verifying the validity of credit card information to be used for payment service and to make payment for the Disney+ service.
Personal Information to be Provided: For credit card information validation: Credit card number, expiration date and year, Date of Birth, first 2 digits of password/ For payment service: Credit card number, expiration date and year.
Retention Period: The personal information provided shall not be separately stored by the third parties, after processing for the purpose set forth herein, as it is already possessed.
B. Cross-border Transferring/Provision
Third parties receiving personal information: The Walt Disney Family of Companies.
Items of personal information to be transferred: Email address, Username (profile names), First and last name, password, IP Address and related internet transaction data, Date of birth, Gender, Billing Address, Home Address, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration.
Country to which personal information is transferred: United States.
Method, date and time of transfer: Transmitted through the network when using the service.
Purpose of use: Creation of unified Disney account; subscription and access to products and services of the Walt Disney family of Companies; provision and operation of the service, payment processing, customer service, marketing and advertising (subject to obtaining necessary consents), research and development, business processing, advertising partners, any other purpose that may be required for the operation and management of the products and services.
Retention and use period: Retained until request made for permanent deletion of your membership/subscription or as required by the relevant laws and regulations.
Right to refuse consent and disadvantages for refusal of consent: By not signing up for services of The Walt Disney Family of Companies or permanently deleting your account, you may refuse to our overseas provision of personal information as above. However, if you refuse, you may not be able to create a Disney account or log in to your account and you may not be able to access the products and services provided by The Walt Disney Family of Companies.
4. Your Control and Choices
Your Controls and Choices as detailed in the Privacy Policy shall also apply to the legal representatives in case of minors.
5. Data Security, Integrity and Retention
As specified in the Privacy Policy the security, integrity and confidentiality of your information are extremely important to us. We take the following measures to ensure the safety of personal information.
a. Administrative Measures: For example, establishment and implementation of internal management plans, regular training on protection of your personal information.
b. Technical Measures: For example, management of access rights to personal information processing system, installation of access control system, encryption of unique identification information, installation of security programs.
c. Physical Measures: For example, limit access to personal information to The Walt Disney Family of Companies as listed out in the Privacy Policy. Those with access have strict confidentiality obligations under the contract, and breach of this obligation may result in sanctions or termination of the contract.
We retain your personal information in accordance with the Privacy Policy, and for fulfillment of the purpose of collection and use. Some data may be retained when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, and storage of financial records etc. We retain following personal information in accordance with applicable laws and regulations.
6. Data Deletion
Except for cases in which we obtain separate consent from you or are obligated to preserve your personal information in accordance with relevant statutes, we will destroy your personal information with the approval of Personal Information Protection Officer when it becomes nonessential to store them, such as once we have met the required needs to process your personal information. Upon deletion, we will destroy your personal information recorded and stored in the form of electronic files or hard copies so that the records cannot be reproduced.
7. Personal Information Protection Officer
If you have a comment or question about this Policy, please contact our Personal Information Protection Officer details provided below:
Name: Hana Kim
Contact Details: TWDC.KR.DPO@disney.com
Contact number: 02-3490-2800
You can also make an access or correction request or a complaint in relation to personal information by sending an email to TWDC.KR.DPO@disney.com.
8. Effective date of this Policy
This Supplemental Privacy Policy for Republic of Korea will be effective from February 5, 2024.
1 September 2023
SUPPLEMENTAL PRIVACY POLICY FOR REPUBLIC OF KOREA
This supplement to our global privacy policy applies to the processing of personal information in the Republic of Korea (“Korea”) or of Korean residents and shall be read in conjunction with our https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
1. Disney+ Subscribers in Korea- Collection and Use Statement
The data controller of your personal information is The Walt Disney Company (Korea), LLC (“TWDC Korea”). TWDC Korea collects and uses the following information from you for the purposes listed below:
A. List per the purpose of collection and use
(1) The Purpose of Collection and Use of Personal Information: Subscription and access to any services and products of the Walt Disney Family of Companies including Disney+ service (for example user authentication and verification to find/reset an account or password including re-subscription upon cancellation of service)
Items of Personal Information Being Collected: Email address, Username (profile names), Password, IP address and related internet transaction data, Device and browser identifiers and related information, Date of birth, Gender, Billing Address, Home Address and Telephone number (including mobile number)
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your subscription or as required by the relevant laws and regulations
(2) The Purpose of Collection and Use of Personal Information: Provision and operation of the Disney+ service (including content and feature delivery, personalization, security and protection against improper usage, content acquisition and development, maintenance, and improvement)
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, Date of birth, Gender, User activity and playback data, Subscription and entitlement information, Service settings and configuration
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(3) The Purpose of Collection and Use of Personal Information: Payment processing, including invoicing, processing, re-subscription upon cancellation of service and refunds
Items of Personal Information Being Collected: Payment information including name, credit card or other payment method number, location information, CVV security code, and expiration date, Date of birth, PIN Code, First 2 digits of credit card PIN, Transaction history and related data, Subscription and entitlement information
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your subscription or as required by the relevant laws and regulations
(4) The Purpose of Collection and Use of Personal Information: Customer service
Items of Personal Information Being Collected: Email address, Username (profile names), First and last name, Browser, device, account identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Payment and transaction information, Service settings and configuration, Home Address, Billing Address, and Telephone number (including mobile number)
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(5) The Purpose of Collection and Use of Personal Information: Adult verification by verifying identity and age (including for subscription to the service and accessing particular content)
Items of Personal Information Being Collected: Name, Date of birth, Gender, Citizen/foreigner, Mobile number, Mobile carriers, Encrypted connecting information (CI), Duplicate subscription verification information (DI)
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(6) The Purpose of Collection and Use of Personal Information: Marketing and advertising (including, email marketing (subject to obtaining necessary consents); push notifications and in-app messaging; and other marketing services like retargeting, acquisition, modeling, and suppression)
Items of Personal Information Being Collected: Email address, IP Address and related internet transaction data, Browser and device identifiers and related information, User activity and playback data, Subscription and entitlement information, Date of birth and Gender
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
(7) The Purpose of Collection and Use of Personal Information: Research and analytics
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Date of birth and Gender
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
(8) The Purpose of Collection and Use of Personal Information: Platforms or Advertisement Service Providers
Items of Personal Information Being Collected: IP address and related internet transaction data, Device and browser identifiers and related information, User activity data
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
(9) The Purpose of Collection and Use of Personal Information: User choice management
Items of Personal Information Being Collected: IP address, internet transaction data, cookies, device and browser identifiers and related information, user activity data, Date of birth and Gender
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(10) The Purpose of Collection and Use of Personal Information: Business processing within https://privacy.thewaltdisneycompany.com/en/definitions/#The-Walt-Disney-Family-of-Companies. The Walt Disney Family of Companies in accordance with the section titled “Use of Information by the Walt Disney Family of Companies” in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Items of Personal Information Being Collected: Email address, Username (profile names), First and last name, IP Address and related internet transaction data, Date of birth, Gender, Billing Address, Home Address, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
B. Right to Refuse Consent/ Disadvantage upon any Refusal to Consent
You may decline our request to collect and use your personal information. However, please note that you may not be able to use or may be restricted to any product or services of the Walt Disney Family of Companies including access to Disney+ without providing your personal information.
2. Sharing of information with Third Parties for provision of Disney+ services
TWDC Korea entrusts the processing of following personal information to third parties to provide D+ services to you:
[Entrusted Parties for Personal Information Handling]
Local Companies
(1) Name of the Company: Korea Credit Bureau
Details of the Entrusted work: Support services of Adult verification and Identify verification
(2) Name of the Company: NHN KCP Corp.
Details of the Entrusted work: Support services of online payments and Credit card information validation
(3) Name of the Company: Kakao Corp., Naver Corp.
Details of the Entrusted work: Support targeted ads based on user behavior, use browser cookie or mobile advertiser id (e.g. ADID, IDFA)
(4) Name of the Company: Transcosmos Korea Inc.
Details of the Entrusted work: Customer service support
(5) Name of the Company : Planets Co., Ltd., Webs Creative Co., Ltd., Zestad Co., Ltd., Connect B Global Co., Ltd., JXD Entertainment Co., Ltd., Hi Difference Co., Ltd.
Details of the Entrusted work: Marketing event management, Execution of marketing event and sending giveaways or products, Planning of marketing event and processing of related works
Cross-border transfer of personal information
(1) Name of the Company & Contact information: Akamai https://www.akamai.com/legal/compliance/privacy-trust-center. Contact
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data
Purpose: Content delivery, caches busting, and other related services
Country: Various countries. See global network information https://www.akamai.com/content/dam/site/en/documents/akamai/points-of-presence-countries.pdf. here.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(2) Name of the Company & Contact information: Fastly (Contact: abuse@fastly.com)
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data
Purpose: Content delivery and other related services
Country: Various countries. See global network information https://www.fastly.com/network-map. here.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(3) Name of the Company & Contact information: Century Link https://www.centurylink.com/aboutus/legal/contact-us.html. Contact
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data
Purpose: Content delivery and other related services
Country: Various countries. See global network information https://www.centurylink.com/local.html. here.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(4) Name of the Company & Contact information: Conviva (Contact: privacy@conviva.com)
Personal information to be transferred: IP address, and related internet transaction data, cookies, device and browser identifiers and information, user activity and playback data, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Video playback and engagement information and other related analytics.
Country: United States
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(5) Name of the Company & Contact information: Braze https://www.braze.com/company/legal/data-subject-request/. Contact
Personal information to be transferred: IP address and related internet transaction data; device identifiers; user activity and other account data, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: In app and push marketing and service notifications
Country: United States, Singapore, Germany, Japan, United Kingdom
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(6) Name of the Company & Contact information: Google Double Click, Floodlight https://support.google.com/policies/contact/general_privacy_form. Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Marketing (including paid media optimization and ad tracking)
Country: Various countries. See global services information https://www.google.com/about/datacenters/locations/?hl=en_US. here.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(7) Name of the Company & Contact information: Flashtalking (Contact: privacy@flashtalking.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, United Kingdom, Germany, Netherlands, France, Italy, Poland, Australia, Singapore, Hong Kong
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(8) Name of the Company & Contact information: Microsoft https://www.microsoft.com/en-us/concern/privacy. Contact
Personal information to be transferred: IP Address; device information, user activity; crash information; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Crash analytics for Xbox version of application only.
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(9) Name of the Company & Contact information: New Relic (Contact: privacy@newrelic.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Analytics, measurement of application and services quality and health
Country: United States, European Union
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(10) Name of the Company & Contact information: Optimizely (Contact: privacy@optimizely.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: A/B & Multi-variant testing
Country: United States, European Union, Vietnam, Australia, South Africa
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(11) Name of the Company & Contact information: TRUSTe (Contact: privacy@trustarc.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: User choice management
Country: United States, Ireland, Germany
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(12) Name of the Company & Contact information: Amazon Web Services (Contact: aws-korea-privacy@amazon.com)
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Infrastructure and IT support and related services (including data storage and management)
Country: Various Countries. See global services information https://aws.amazon.com/about-aws/global-infrastructure/. here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(13) Name of the Company & Contact information: ServiceNow (Contact: privacy@servicenow.com)
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Providing customer support
Country: United States, Canada, South Korea, Singapore, Germany, Switzerland, Netherlands, Ireland, United Kingdom, Japan, Australia, Brazil
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(14) Name of the Company & Contact information: SnowFlake (Contact: privacy@snowflake.com)
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Infrastructure and IT support and related services (including data storage and management)
Country: Various countries. See global services information https://docs.snowflake.com/en/user-guide/intro-regions.html. here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(15) Name of the Company & Contact information: Salesforce https://www.salesforce.com/form/other/privacy-request/. Contact
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Marketing (including email marketing) and Customer Support
Country: Various countries. See global services information https://docs.snowflake.com/en/user-guide/intro-regions.html. here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(16) Name of the Company & Contact information: Adobe https://www.adobe.com/privacy/privacy-contact.html. Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Analytics and user choice management
Country: United States, Irealand
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(17) Name of the Company & Contact information: Qualtrics (Contact: privacy@qualtrics.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Surveys and user communications
Country: United States
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(18) Name of the Company & Contact information: Zendesk (Contact: privacy@zendesk.com)
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Customer Support
Country: United States, European Economic Area, Japan, Australia
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(19) Name of the Company & Contact information: Facebook (Contact: korealocalagent@support.facebook.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Digital Advertising
Country: Various Countries. See global services information https://sustainability.fb.com/data-centers/. here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(20) Name of the Company & Contact information: Twitter https://help.twitter.com/en/privacy. Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Digital Advertising
Country: United States, Ireland
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(21) Name of the Company & Contact information: Google Ads https://support.google.com/policies/contact/general_privacy_form. Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Digital Advertising
Country: Various Countries. See global services information https://www.google.com/about/datacenters/locations/. here
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(22) Name of the Company & Contact information: Microsoft Bing https://www.microsoft.com/en-us/concern/privacy. Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Digital Advertising
Country: United States, Australia, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(23) Name of the Company & Contact information: Yahoo Gemini https://io.help.yahoo.com/contact/index?page=contactform&locale=en_US&token=Zh/BBVqXzLHlIbokbUqVWTUbuuQeXGkGnZzhKR2JQ4O6mMQdy9JSWfJCJWvc4C3/4ml2UKrHQ0nko7rLtSR524MJxCBJKi0QupzNgfCBzntg9dSBRYOublwVE756J6MoPaeCIytHoug=&selectedChannel=email-icon. Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Digital Advertising
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(24) Name of the Company & Contact information: Apple Search Ads https://www.apple.com/legal/privacy/contact/. Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Digital Advertising
Country: United States
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(25) Name of the Company & Contact information: Oath https://io.help.yahoo.com/contact/index?page=contactform&locale=en_US&token=Zh/BBVqXzLHlIbokbUqVWTUbuuQeXGkGnZzhKR2JQ4O6mMQdy9JSWfJCJWvc4C3/4ml2UKrHQ0nko7rLtSR524MJxCBJKi0QupzNgfCBzntg9dSBRYOublwVE756J6MoPaeCIytHoug=&selectedChannel=email-icon. Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Digital Advertising
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Digital Advertising
Country: Various Countries. See global services information https://aws.amazon.com/about-aws/global-infrastructure/. here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(27) Name of the Company & Contact information: The Trade Desk (Contact: privacy@thetradedesk.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Digital Advertising
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(28) Name of the Company & Contact information: Impact Radius (Contact: privacy@impact.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Affiliate marketing and related analytics and operations
Country: United States
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(29) Name of the Company & Contact information: Validity (Return Path) (Contact: privacy@validity.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Email management
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(30) Name of the Company & Contact information: Movable Ink (Contact: privacy@movableink.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Email management
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(31) Name of the Company & Contact information: Litmus (Contact: privacy@litmus.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Email rendering
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(32) Name of the Company & Contact information: Sentry.io (Contact: security@sentryio.com)
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Analytics (including crash reporting)
Country: United States, European Union
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(33) Name of the Company & Contact information: Apple https://www.apple.com/legal/privacy/contact/. Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Platform operations
Country: United States
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(34) Name of the Company & Contact information: Google (Android TV, Phones, Tablets) https://support.google.com/policies/contact/general_privacy_form. Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Platform operations
Country: Various Countries. See global services information https://www.google.com/about/datacenters/locations/. here
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(35) Name of the Company & Contact information: Amazon (Fire TV, Fire Tablet) (Contact: aws-korea-privacy@amazon.com)
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Platform operations
Country: Various Countries. See global services information https://www.amazon.com/gp/help/customer/display.html?nodeId=GCBBSZMUXA6U2P8R. here
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(36) Name of the Company & Contact information: LG (TV) (Contact: caprivacy@lge.com)
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Platform operations
Country: United States, South Korea
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(37) Name of the Company & Contact information: Samsung (TV) https://www.samsung.com/global/business/networks/contact-us/. Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Platform operations
Country: United States, South Korea, European Union, Australia
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(38) Name of the Company & Contact information: Sony (Playstation) http://www.playstation.com/support. Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Platform operations
Country: United States, United Kingdom, Japan
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(39) Name of the Company & Contact information: Microsoft Xbox https://www.microsoft.com/en-us/concern/privacy. Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy.
Purpose: Platform operations
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(40) Name of the Company & Contact information: Adyen, N.V. (Contact: dpo@adyen.com)
Personal information to be transferred: Payment card information such as primary account number, card verification code and cardholder name, related transaction data, and other information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Payment transaction related services, which include Processing of payment transactions, fraud detection, and other related services
Country: Various Countries. See global services information https://www.adyen.com/contact. here
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: When necessary for a purpose
(41) Name of the Company & Contact information: https://privacy.thewaltdisneycompany.com/en/definitions/#The-Walt-Disney-Family-of-Companies. The Walt Disney Family of Companies (Contact: twdc.kr.dpo@disney.com)
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Business processing by the Company (including, providing and managing service access, providing security functions, customer support, communication with subscribers, product and service improvement, marketing and advertising, content development, compliance with laws and regulations, as described in the 'Use of Information' section of our privacy policy other purposes)
Country: Various Countries
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: When necessary for a purpose
(42) Name of the Company & Contact information: TikTok Inc. https://www.tiktok.com/legal/report/privacy. Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(43) Name of the Company & Contact information: ROKT Corp. (Contact: privacy@rokt.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, European Union, Singapore, United Kingdom, Australia, Japan
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(44) Name of the Company & Contact information: Oracle America Inc. (Bluekai) https://www.oracle.com/legal/data-privacy-inquiry-form.html. Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(45) Name of the Company & Contact information: Webhelp S.A.S. (Contact: privacy@webhelp.com)
Personal information to be transferred: Name; email address; payment method; last 4 digits of payment card; device types; order number and other information to handle customer service
Purpose: Customer service supports via phone and chat
Country: France, South Korea, Malaysia
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations
(46) Name of the Company & Contact information: Support Services Group (Contact: privacy@s2g.net)
Personal information to be transferred: Name, email address, payment method, last 4 digits of payment card, device types, order number and other information to handle customer service
Purpose: Customer service supports via phone and chat
Country: United States, Philippines, Canada, South Korea, Malaysia
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations
(47) Name of the Company & Contact information: InMobi (Contact: privacy@inmobi.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, European Union, United Kingdom
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(48) Name of the Company & Contact information: TrafficGuard (Contact: privacy@trafficguard.ai)
Personal information to be transferred: IP address and related internet transaction data; browser and device identifiers and information; user activity data
Purpose: Content delivery, caches busting, and other related services
Country: Various countries. See global network information https://dash.trafficguard.ai/terms/subprocessors. here .
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
3. Sharing of Information Third Parties
TWDC Korea will not share your information any other third party (other than for provision of D+ services as listed above) without your prior consent.
If you have consented to a provision of your information to any third party, the following details apply to you:
Local Companies
Recipient: Credit card companies: 1. KB Kookmin Card Corp., 2. BC Card Co., Ltd., 3. Lottecard Co., Ltd., 4. NongHyup Bank Co., Ltd. (NH Nonghyup Card), 5. Hyundai Card Corp., 6. Shinhancard Co., Ltd., 7. KEB Hana Card Co., Ltd., 8. Samsung Card Co., Ltd., and other credit card companies)
Purpose of Provision: The purpose of provision of personal information is to proceed with verifying the validity of credit card information to be used for payment service and to make payment for the Disney+ service.
Personal Information to be Provided: For credit card information validation: Credit card number, expiration date and year, Date of Birth, first 2 digits of password/ For payment service: Credit card number, expiration date and year
Retention Period: The personal information provided shall not be separately stored by the third parties, after processing for the purpose set forth herein, as it is already possessed.
Cross-border Transferring/Provision
Recipient: https://privacy.thewaltdisneycompany.com/en/definitions/#The-Walt-Disney-Family-of-Companies The Walt Company Group of Companies
Purpose of Provision: Creation of unified Disney account; subscription and access to products and services of the Walt Disney family of Companies; provision and operation of the service, payment processing, customer service, marketing and advertising (subject to obtaining necessary consents), research and development, business processing, advertising partners, any other purpose that may be required for the operation and management of the products and services
Personal Information to be Provided: All data collected by TWDC Korea as listed out in the https://www.disneyplus.com/legal/collection-and-use-of-my-personal-information. Collection and Use Statement
Country to which personal information is transferred: United States
Method, date, and time of transfer: Transmitted through the network when using the service
Retention and use period: Retained until request made for permanent deletion of your membership/subscription or as required by the relevant laws and regulations
4. Your Control and Choices
Your Controls and Choices as detailed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy shall also apply to the legal representatives in case of minors.
5. Data Security, Integrity and Retention
As specified in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy, the security, integrity and confidentiality of your information are extremely important to us. We take the following measures to ensure the safety of personal information.
a. Administrative Measures: For example, establishment and implementation of internal management plans, regular training on protection of your personal information.
b. Technical Measures: For example, management of access rights to personal information processing system, installation of access control system, encryption of unique identification information, installation of security programs.
c. Physical Measures: For example, limit access to personal information to https://privacy.thewaltdisneycompany.com/en/definitions/#The-Walt-Disney-Family-of-Companies. The Walt Disney Family of Companies, or as listed out in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy. Those with access have strict confidentiality obligations under the contract, and breach of this obligation may result in sanctions or termination of the contract.
We retain your personal information in accordance with the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/. Privacy Policy, and for fulfillment of the purpose of collection and use. Some data may be retained when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, and storage of financial records etc.
6. Data Deletion
Except for cases in which we obtain separate consent from you or are obligated to preserve your personal information in accordance with relevant statutes, we will destroy your personal information when it becomes nonessential to store them, such as once we have met the required needs to process your personal information. Upon deletion, we will destroy your personal information recorded and stored in the form of electronic files or hard copies so that the records cannot be reproduced.
7. Personal Information Protection Officer
If you have a comment or question about this Policy, please contact our Personal Information Protection Officer details provided below:
Name: Hana Kim
Contact Details: TWDC.KR.DPO@disney.com
Contact number: 02-3490-2800
You can also make an access or correction request or a complaint in relation to personal information by sending an email to TWDC.KR.DPO@disney.com.
8. Effective date of this Policy
This Supplemental Privacy Policy for Republic of Korea will be effective from September 1, 2023
13 October 2022
SUPPLEMENTAL PRIVACY POLICY FOR REPUBLIC OF KOREA
This supplement to our global privacy policy applies to the processing of personal information in the Republic of Korea (“Korea”) or of Korean residents and shall be read in conjunction with our Privacy Policy.
1. Disney+ Subscribers in Korea- Collection and Use Statement
If you are a Disney+ subscriber in Korea, The Walt Disney Company (Korea), LLC (“TWDC Korea”) collects and uses the following information from you for the purpose of providing and enjoying Disney+ service in Korea:
A. List per the purpose of collection and use
(1) The Purpose of Collection and Use of Personal Information: Subscription and access to the Disney+ service (including user authentication and verification to find/reset an account or password including re-subscription upon cancellation of service)
Items of Personal Information Being Collected: Email address, Username (profile names), Password, IP address and related internet transaction data, Device and browser identifiers and related information, Other Information as set forth in the Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your subscription or as required by the relevant laws and regulations
(2) The Purpose of Collection and Use of Personal Information: Provision and operation of the Disney+ service (including content and feature delivery, personalization, security and protection against improper usage, content acquisition and development, maintenance, and improvement)
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Other information as set forth in the Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(3) The Purpose of Collection and Use of Personal Information: Payment processing, including invoicing, processing, re-subscription upon cancellation of service and refunds
Items of Personal Information Being Collected: Payment information including name, credit card or other payment method number, location information, CVV security code, and expiration date, Date of birth, PIN Code, First 2 digits of credit card PIN, Transaction history and related data, Subscription and entitlement information, Other Information as set forth in the Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your subscription or as required by the relevant laws and regulations
(4) The Purpose of Collection and Use of Personal Information: Customer service
Items of Personal Information Being Collected: Email address, Username (profile names), First and last name, Browser, device, account identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Payment and transaction information, Service settings and configuration, Other information as set forth in the Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(5) The Purpose of Collection and Use of Personal Information: Adult verification by verifying identity and age (including for subscription to the service and accessing particular content)
Items of Personal Information Being Collected: Name, Date of birth, Gender, Citizen/foreigner, Mobile number, Mobile carriers, Encrypted connecting information (CI), Duplicate subscription verification information (DI), Other information as set forth in the Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(6) The Purpose of Collection and Use of Personal Information: Marketing and advertising (including, email marketing; push notifications and in-app messaging; and other marketing services like retargeting, acquisition, modeling, and suppression)
Items of Personal Information Being Collected: Email address, IP Address and related internet transaction data, Browser and device identifiers and related information, User activity and playback data, Subscription and entitlement information, Other information as set forth in the Privacy Policy
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
(7) The Purpose of Collection and Use of Personal Information: Research and analytics
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Other information as set forth in the Privacy Policy
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
(8) The Purpose of Collection and Use of Personal Information: Platforms
Items of Personal Information Being Collected: IP address and related internet transaction data, Device and browser identifiers and related information, User activity data, Other information as set forth in the Privacy Policy
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
(9) The Purpose of Collection and Use of Personal Information: User choice management
Items of Personal Information Being Collected: IP address, internet transaction data, cookies, device and browser identifiers and related information, user activity data, Other Information as set forth in the Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(10) The Purpose of Collection and Use of Personal Information: Business processing within The Walt Disney Family of Companies in accordance with the section titled “Use of Information by the Walt Disney Family of Companies” in the Privacy Policy
Items of Personal Information Being Collected: Email address, Username (profile names), First and last name, IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Other information as set forth in the Privacy Policy
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
B. Right to Refuse Consent/ Disadvantage upon any Refusal to Consent
You may decline our request to collect and use your personal information. However, please note that you may not be able to use Disney+ or may be restricted to certain services without providing your personal information.
2. Sharing of information with Third Parties for provision of Disney+ services
TWDC Korea entrusts the processing of following personal information to third parties to provide D+ services to you:
[Entrusted Parties for Personal Information Handling]
Local Companies
(1) Name of the Company: Korea Credit Bureau
Details of the Entrusted work: Support services of Adult verification and Identify verification
(2) Name of the Company: NHN KCP Corp.
Details of the Entrusted work: Support services of online payments and Credit card information validation
(3) Name of the Company: Kakao Corp.
Details of the Entrusted work: Support targeted ads based on user behavior, use browser cookie or mobile advertiser id (e.g. ADID, IDFA)
(4) Name of the Company: Naver Corp.
Details of the Entrusted work: Support targeted ads based on user behavior, use browser cookie or mobile advertiser id (e.g. ADID, IDFA)
(5) Name of the Company: Transcosmos Korea Inc.
Details of the Entrusted work: Customer service support
Cross-border transfer of personal information
(1) Name of the Company & Contact information: Akamai Contact
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data
Purpose: Content delivery, caches busting, and other related services
Country: Various countries. See global network information here.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(2) Name of the Company & Contact information: Fastly (Contact: abuse@fastly.com)
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data
Purpose: Content delivery and other related services
Country: Various countries. See global network information https://www.fastly.com/network-map here .
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(3) Name of the Company & Contact information: Century Link Contact
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data
Purpose: Content delivery and other related services
Country: Various countries. See global network information https://www.centurylink.com/local.html here .
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(4) Name of the Company & Contact information: Conviva (Contact: privacy@conviva.com)
Personal information to be transferred: IP address, and related internet transaction data, cookies, device and browser identifiers and information, user activity and playback data, and other information as listed in the Privacy Policy
Purpose: Video playback and engagement information and other related analytics.
Country: United States
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(5) Name of the Company & Contact information: Braze Contact
Personal information to be transferred: IP address and related internet transaction data; device identifiers; user activity and other account data, and other information as listed in the Privacy Policy
Purpose: In app and push marketing and service notifications
Country: United States, Singapore, Germany, Japan, United Kingdom
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(6) Name of the Company & Contact information: Google Double Click, Floodlight Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data, and other information as listed in the Privacy Policy
Purpose: Marketing (including paid media optimization and ad tracking)
Country: Various countries. See global services information here.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(7) Name of the Company & Contact information: Flashtalking (Contact: privacy@flashtalking.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, United Kingdom, Germany, Netherlands, France, Italy, Poland, Australia, Singapore, Hong Kong
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(8) Name of the Company & Contact information: Microsoft Contact
Personal information to be transferred: IP Address; device information, user activity; crash information; and other information as listed in the Privacy Policy
Purpose: Crash analytics for Xbox version of application only.
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(9) Name of the Company & Contact information: New Relic (Contact: privacy@newrelic.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the Privacy Policy
Purpose: Analytics, measurement of application and services quality and health
Country: United States, European Union
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(10) Name of the Company & Contact information: Optimizely (Contact: privacy@optimizely.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the Privacy Policy
Purpose: A/B & Multi-variant testing
Country: United States, European Union, Vietnam, Australia, South Africa
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(11) Name of the Company & Contact information: TRUSTe (Contact: privacy@trustarc.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy
Purpose: User choice management
Country: United States, Ireland, Germany
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(12) Name of the Company & Contact information: Amazon Web Services (Contact: aws-korea-privacy@amazon.com)
Personal information to be transferred: Personal Information as set forth in the Privacy Policy.
Purpose: Infrastructure and IT support and related services (including data storage and management)
Country: Various Countries. See global services information here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(13) Name of the Company & Contact information: ServiceNow (Contact: privacy@servicenow.com)
Personal information to be transferred: Personal Information as set forth in the Privacy Policy.
Purpose: Providing customer support
Country: United States, Canada, South Korea, Singapore, Germany, Switzerland, Netherlands, Ireland, United Kingdom, Japan, Australia, Brazil
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(14) Name of the Company & Contact information: SnowFlake (Contact: privacy@snowflake.com)
Personal information to be transferred: Personal Information as set forth in the Privacy Policy
Purpose: Infrastructure and IT support and related services (including data storage and management)
Country: Various countries. See global services information here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(15) Name of the Company & Contact information: Salesforce Contact
Personal information to be transferred: Personal Information as set forth in the Privacy Policy
Purpose: Marketing (including email marketing) and Customer Support
Country: Various countries. See global services information here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(16) Name of the Company & Contact information: Adobe Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Analytics and user choice management
Country: United States, Irealand
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(17) Name of the Company & Contact information: Qualtrics (Contact: privacy@qualtrics.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; email address and other subscriber information, and other information as listed in the Privacy Policy.
Purpose: Surveys and user communications
Country: United States
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(18) Name of the Company & Contact information: Zendesk (Contact: privacy@zendesk.com)
Personal information to be transferred: Personal Information as set forth in the Privacy Policy.
Purpose: Customer Support
Country: United States, European Economic Area, Japan, Australia
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(19) Name of the Company & Contact information: Facebook (Contact: korealocalagent@support.facebook.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy/ Privacy Policy .
Purpose: Digital Advertising
Country: Various Countries. See global services information https://sustainability.fb.com/data-centers/ here .
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(20) Name of the Company & Contact information: Twitter https://help.twitter.com/en/privacy Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Privacy Policy.
Purpose: Digital Advertising
Country: United States, Ireland
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(21) Name of the Company & Contact information: Google Ads Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Privacy Policy.
Purpose: Digital Advertising
Country: Various Countries. See global services information here
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(22) Name of the Company & Contact information: Microsoft Bing Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Privacy Policy.
Purpose: Digital Advertising
Country: United States, Australia, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(23) Name of the Company & Contact information: Yahoo Gemini Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Privacy Policy.
Purpose: Digital Advertising
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(24) Name of the Company & Contact information: Apple Search Ads https://www.apple.com/legal/privacy/contact/ Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Privacy Policy.
Purpose: Digital Advertising
Country: United States
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(25) Name of the Company & Contact information: Oath Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Privacy Policy.
Purpose: Digital Advertising
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Privacy Policy.
Purpose: Digital Advertising
Country: Various Countries. See global services information here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(27) Name of the Company & Contact information: The Trade Desk (Contact: privacy@thetradedesk.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Privacy Policy.
Purpose: Digital Advertising
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(28) Name of the Company & Contact information: Impact Radius (Contact: privacy@impact.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; subscriber information, and other information as listed in the Privacy Policy.
Purpose: Affiliate marketing and related analytics and operations
Country: United States
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(29) Name of the Company & Contact information: Validity (Return Path) (Contact: privacy@validity.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Email management
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(30) Name of the Company & Contact information: Movable Ink (Contact: privacy@movableink.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Email management
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(31) Name of the Company & Contact information: Litmus (Contact: privacy@litmus.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Email rendering
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(32) Name of the Company & Contact information: Sentry.io (Contact: security@sentryio.com)
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Analytics (including crash reporting)
Country: United States, European Union
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(33) Name of the Company & Contact information: Apple https://www.apple.com/legal/privacy/contact/ Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Platform operations
Country: United States
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(34) Name of the Company & Contact information: Google (Android TV, Phones, Tablets) Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Platform operations
Country: Various Countries. See global services information here
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(35) Name of the Company & Contact information: Amazon (Fire TV, Fire Tablet) (Contact: aws-korea-privacy@amazon.com)
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Platform operations
Country: Various Countries. See global services information here
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(36) Name of the Company & Contact information: LG (TV) (Contact: caprivacy@lge.com)
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Platform operations
Country: United States, South Korea
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(37) Name of the Company & Contact information: Samsung (TV) Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Platform operations
Country: United States, South Korea, European Union, Australia
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(38) Name of the Company & Contact information: Sony (Playstation) http://www.playstation.com/support Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Platform operations
Country: United States, United Kingdom, Japan
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(39) Name of the Company & Contact information: Microsoft Xbox Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy.
Purpose: Platform operations
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(40) Name of the Company & Contact information: Adyen, N.V. (Contact: dpo@adyen.com)
Personal information to be transferred: Payment card information such as primary account number, card verification code and cardholder name, related transaction data, and other information as set forth in the Privacy Policy
Purpose: Payment transaction related services, which include Processing of payment transactions, fraud detection, and other related services
Country: Various Countries. See global services information https://www.adyen.com/contact here
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: When necessary for a purpose
(41) Name of the Company & Contact information: The Walt Disney Family of Companies (Contact: twdc.kr.dpo@disney.com)
Personal information to be transferred: Personal Information as set forth in the Privacy Policy
Purpose: Business processing by the Company (including, providing and managing service access, providing security functions, customer support, communication with subscribers, product and service improvement, marketing and advertising, content development, compliance with laws and regulations, as described in the 'Use of Information' section of our privacy policy other purposes)
Country: Various Countries
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: When necessary for a purpose
(42) Name of the Company & Contact information: TikTok Inc. https://www.tiktok.com/legal/report/privacy Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(43) Name of the Company & Contact information: ROKT Corp. (Contact: privacy@rokt.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, European Union, Singapore, United Kingdom, Australia, Japan
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(44) Name of the Company & Contact information: Oracle America Inc. (Bluekai) Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(45) Name of the Company & Contact information: Webhelp S.A.S. (Contact: privacy@webhelp.com)
Personal information to be transferred: Name; email address; payment method; last 4 digits of payment card; device types; order number and other information to handle customer service
Purpose: Customer service supports via phone and chat
Country: France, South Korea, Malaysia
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations
(46) Name of the Company & Contact information: Support Services Group (Contact: privacy@s2g.net)
Personal information to be transferred: Name, email address, payment method, last 4 digits of payment card, device types, order number and other information to handle customer service
Purpose: Customer service supports via phone and chat
Country: United States, Philippines, Canada, South Korea, Malaysia
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations
(47) Name of the Company & Contact information: InMobi (Contact: privacy@inmobi.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, European Union, United Kingdom
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(48) Name of the Company & Contact information: TrafficGuard (Contact: privacy@trafficguard.ai)
Personal information to be transferred: IP address and related internet transaction data; browser and device identifiers and information; user activity data
Purpose: Content delivery, caches busting, and other related services
Country: Various countries. See global network information https://dash.trafficguard.ai/terms/subprocessors here .
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
3. Sharing of Information Third Parties
TWDC Korea will not share your information any other third party (other than for provision of D+ services as listed above) without your prior consent.
If you have consented to a provision of your information to any third party, the following details apply to you:
Local Companies
Recipient: Credit card companies: 1. KB Kookmin Card Corp., 2. BC Card Co., Ltd., 3. Lottecard Co., Ltd., 4. NongHyup Bank Co., Ltd. (NH Nonghyup Card), 5. Hyundai Card Corp., 6. Shinhancard Co., Ltd., 7. KEB Hana Card Co., Ltd., 8. Samsung Card Co., Ltd., etc.
Purpose of Provision: The purpose of provision of personal information is to proceed with verifying the validity of credit card information to be used for payment service and to make payment for the Disney+ service.
Personal Information to be Provided: For credit card information validation: Credit card number, expiration date and year, Date of Birth, first 2 digits of password/ For payment service: Credit card number, expiration date and year
Retention Period: The personal information provided shall not be separately stored by the third parties, after processing for the purpose set forth herein, as it is already possessed.
4. Your Control and Choices
Your Controls and Choices as detailed in the Privacy Policy shall also apply to the legal representatives in case of minors.
5. Data Security, Integrity and Retention
As specified in the Privacy Policy, the security, integrity and confidentiality of your information are extremely important to us. We take the following measures to ensure the safety of personal information.
a. Administrative Measures: For example, establishment and implementation of internal management plans, regular training on protection of your personal information.
b. Technical Measures: For example, management of access rights to personal information processing system, installation of access control system, encryption of unique identification information, installation of security programs.
c. Physical Measures: For example, limit access to personal information to https://privacy.thewaltdisneycompany.com/en/definitions/#The-Walt-Disney-Family-of-Companies The Walt Disney Family of Companies , or as listed out in the Privacy Policy. Those with access have strict confidentiality obligations under the contract, and breach of this obligation may result in sanctions or termination of the contract.
We retain your personal information in accordance with the Privacy Policy, and for fulfillment of the purpose of collection and use. Some data may be retained when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, and storage of financial records etc.
6. Data Deletion
Except for cases in which we obtain separate consent from you or are obligated to preserve your personal information in accordance with relevant statutes, we will destroy your personal information when it becomes nonessential to store them, such as once we have met the required needs to process your personal information. Upon deletion, we will destroy your personal information recorded and stored in the form of electronic files or hard copies so that the records cannot be reproduced.
7. Personal Information Protection Officer
If you have a comment or question about this Policy, please contact our Personal Information Protection Officer details provided below:
Name: Hana Kim
Contact Details: TWDC.KR.DPO@disney.com
Contact number: 02-3490-2800
You can also make an access or correction request or a complaint in relation to personal information by sending an email to TWDC.KR.DPO@disney.com.
8. Effective date of this Policy
This Supplemental Privacy Policy for Republic of Korea will be effective from October 13, 2022.
12 November 2021
SUPPLEMENTAL PRIVACY POLICY FOR REPUBLIC OF KOREA
This supplement to our global privacy policy applies to the processing of personal information in the Republic of Korea (“Korea”) or of Korean residents and shall be read in conjunction with our https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
1. Disney+ Subscribers in Korea- Collection and Use Statement
If you are a Disney+ subscriber in Korea, The Walt Disney Company (Korea), LLC (“TWDC Korea”) collects and uses the following information from you for the purpose of providing and enjoying Disney+ service in Korea:
A. List per the purpose of collection and use
(1) The Purpose of Collection and Use of Personal Information: Subscription and access to the Disney+ service (including user authentication and verification to find/reset an account or password including re-subscription upon cancellation of service)
Items of Personal Information Being Collected: Email address, Username (profile names), Password, IP address and related internet transaction data, Device and browser identifiers and related information, Other Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your subscription or as required by the relevant laws and regulations
(2) The Purpose of Collection and Use of Personal Information: Provision and operation of the Disney+ service (including content and feature delivery, personalization, security and protection against improper usage, content acquisition and development, maintenance, and improvement)
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Other information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(3) The Purpose of Collection and Use of Personal Information: Payment processing, including invoicing, processing, re-subscription upon cancellation of service and refunds
Items of Personal Information Being Collected: Payment information including name, credit card or other payment method number, location information, CVV security code, and expiration date, Date of birth, PIN Code, First 2 digits of credit card PIN, Transaction history and related data, Subscription and entitlement information, Other Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your subscription or as required by the relevant laws and regulations
(4) The Purpose of Collection and Use of Personal Information: Customer service
Items of Personal Information Being Collected: Email address, Username (profile names), First and last name, Browser, device, account identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Payment and transaction information, Service settings and configuration, Other information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(5) The Purpose of Collection and Use of Personal Information: Adult verification by verifying identity and age (including for subscription to the service and accessing particular content)
Items of Personal Information Being Collected: Name, Date of birth, Gender, Citizen/foreigner, Mobile number, Mobile carriers, Encrypted connecting information (CI), Duplicate subscription verification information (DI), Other information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(6) The Purpose of Collection and Use of Personal Information: Marketing and advertising (including, email marketing; push notifications and in-app messaging; and other marketing services like retargeting, acquisition, modeling, and suppression)
Items of Personal Information Being Collected: Email address, IP Address and related internet transaction data, Browser and device identifiers and related information, User activity and playback data, Subscription and entitlement information, Other information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
(7) The Purpose of Collection and Use of Personal Information: Research and analytics
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Other information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
(8) The Purpose of Collection and Use of Personal Information: Platforms
Items of Personal Information Being Collected: IP address and related internet transaction data, Device and browser identifiers and related information, User activity data, Other information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
(9) The Purpose of Collection and Use of Personal Information: User choice management
Items of Personal Information Being Collected: IP address, internet transaction data, cookies, device and browser identifiers and related information, user activity data, Other Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations
(10) The Purpose of Collection and Use of Personal Information: Business processing within https://privacy.thewaltdisneycompany.com/en/definitions/#The-Walt-Disney-Family-of-Companies">The Walt Disney Family of Companies in accordance with the section titled “Use of Information by the Walt Disney Family of Companies” in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Items of Personal Information Being Collected: Email address, Username (profile names), First and last name, IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Other information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose
B. Right to Refuse Consent/ Disadvantage upon any Refusal to Consent
You may decline our request to collect and use your personal information. However, please note that you may not be able to use Disney+ or may be restricted to certain services without providing your personal information.
2. Sharing of information with Third Parties for provision of Disney+ services
TWDC Korea entrusts the processing of following personal information to third parties to provide D+ services to you:
[Entrusted Parties for Personal Information Handling]
Local Companies
(1) Name of the Company: Korea Credit Bureau
Details of the Entrusted work: Support services of Adult verification and Identify verification
(2) Name of the Company: NHN KCP Corp.
Details of the Entrusted work: Support services of online payments and Credit card information validation
(3) Name of the Company: Kakao Corp.
Details of the Entrusted work: Support targeted ads based on user behavior, use browser cookie or mobile advertiser id (e.g. ADID, IDFA)
(4) Name of the Company: Naver Corp.
Details of the Entrusted work: Support targeted ads based on user behavior, use browser cookie or mobile advertiser id (e.g. ADID, IDFA)
Cross-border transfer of personal information
(1) Name of the Company & Contact information: Akamai https://www.akamai.com/legal/compliance/privacy-trust-center">Contact
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data
Purpose: Content delivery, caches busting, and other related services
Country: Various countries. See global network information https://www.akamai.com/content/dam/site/en/documents/akamai/points-of-presence-countries.pdf">here.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(2) Name of the Company & Contact information: Fastly (Contact: abuse@fastly.com)
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data
Purpose: Content delivery and other related services
Country: Various countries. See global network information https://www.fastly.com/network-map">here.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(3) Name of the Company & Contact information: Century Link https://www.centurylink.com/aboutus/legal/contact-us.html">Contact
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data
Purpose: Content delivery and other related services
Country: Various countries. See global network information https://www.centurylink.com/local.html">here.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(4) Name of the Company & Contact information: Conviva (Contact: privacy@conviva.com)
Personal information to be transferred: IP address, and related internet transaction data, cookies, device and browser identifiers and information, user activity and playback data, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: Video playback and engagement information and other related analytics.
Country: United States
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(5) Name of the Company & Contact information: Braze https://www.braze.com/company/legal/data-subject-request Contact
Personal information to be transferred: IP address and related internet transaction data; device identifiers; user activity and other account data, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: In app and push marketing and service notifications
Country: United States, Singapore, Germany, Japan, United Kingdom
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(6) Name of the Company & Contact information: Google Double Click, Floodlight https://support.google.com/policies/contact/general_privacy_form">Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: Marketing (including paid media optimization and ad tracking)
Country: Various countries. See global services information https://www.google.com/about/datacenters/locations/?hl=en_US">here.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(7) Name of the Company & Contact information: Flashtalking (Contact: privacy@flashtalking.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, United Kingdom, Germany, Netherlands, France, Italy, Poland, Australia, Singapore, Hong Kong
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(8) Name of the Company & Contact information: Microsoft https://www.microsoft.com/en-us/concern/privacy">Contact
Personal information to be transferred: IP Address; device information, user activity; crash information; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: Crash analytics for Xbox version of application only.
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(9) Name of the Company & Contact information: New Relic (Contact: privacy@newrelic.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: Analytics, measurement of application and services quality and health
Country: United States, European Union
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(10) Name of the Company & Contact information: Optimizely (Contact: privacy@optimizely.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: A/B & Multi-variant testing
Country: United States, European Union, Vietnam, Australia, South Africa
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(11) Name of the Company & Contact information: TRUSTe (Contact: privacy@trustarc.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: User choice management
Country: United States, Ireland, Germany
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(12) Name of the Company & Contact information: Amazon Web Services (Contact: aws-korea-privacy@amazon.com)
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Infrastructure and IT support and related services (including data storage and management)
Country: Various Countries. See global services information https://aws.amazon.com/about-aws/global-infrastructure here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(13) Name of the Company & Contact information: ServiceNow (Contact: privacy@servicenow.com)
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Providing customer support
Country: United States, Canada, South Korea, Singapore, Germany, Switzerland, Netherlands, Ireland, United Kingdom, Japan, Australia, Brazil
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(14) Name of the Company & Contact information: SnowFlake (Contact: privacy@snowflake.com)
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: Infrastructure and IT support and related services (including data storage and management)
Country: Various countries. See global services information https://docs.snowflake.com/en/user-guide/intro-regions.html">here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(15) Name of the Company & Contact information: Salesforce https://www.salesforce.com/form/other/privacy-request Contact
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: Marketing (including email marketing) and Customer Support
Country: Various countries. See global services information https://docs.snowflake.com/en/user-guide/intro-regions.html">here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(16) Name of the Company & Contact information: Adobe https://www.adobe.com/privacy/privacy-contact.html">Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Analytics and user choice management
Country: United States, Irealand
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(17) Name of the Company & Contact information: Qualtrics (Contact: privacy@qualtrics.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Surveys and user communications
Country: United States
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(18) Name of the Company & Contact information: Zendesk (Contact: privacy@zendesk.com)
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Customer Support
Country: United States, European Economic Area, Japan, Australia
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(19) Name of the Company & Contact information: Facebook (Contact: korealocalagent@support.facebook.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Digital Advertising
Country: Various Countries. See global services information https://sustainability.fb.com/data-centers here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(20) Name of the Company & Contact information: Twitter https://help.twitter.com/en/privacy">Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Digital Advertising
Country: United States, Ireland
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(21) Name of the Company & Contact information: Google Ads https://support.google.com/policies/contact/general_privacy_form">Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Digital Advertising
Country: Various Countries. See global services information https://www.google.com/about/datacenters/locations here
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(22) Name of the Company & Contact information: Microsoft Bing https://www.microsoft.com/en-us/concern/privacy">Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Digital Advertising
Country: United States, Australia, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(23) Name of the Company & Contact information: Yahoo Gemini https://io.help.yahoo.com/contact/index?page=contactform&locale=en_US&token=Zh/BBVqXzLHlIbokbUqVWTUbuuQeXGkGnZzhKR2JQ4O6mMQdy9JSWfJCJWvc4C3/4ml2UKrHQ0nko7rLtSR524MJxCBJKi0QupzNgfCBzntg9dSBRYOublwVE756J6MoPaeCIytHoug=&selectedChannel=email-icon">Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Digital Advertising
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(24) Name of the Company & Contact information: Apple Search Ads https://www.apple.com/legal/privacy/contact Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Digital Advertising
Country: United States
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(25) Name of the Company & Contact information: Oath https://io.help.yahoo.com/contact/index?page=contactform&locale=en_US&token=Zh/BBVqXzLHlIbokbUqVWTUbuuQeXGkGnZzhKR2JQ4O6mMQdy9JSWfJCJWvc4C3/4ml2UKrHQ0nko7rLtSR524MJxCBJKi0QupzNgfCBzntg9dSBRYOublwVE756J6MoPaeCIytHoug=&selectedChannel=email-icon">Contact
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Digital Advertising
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Digital Advertising
Country: Various Countries. See global services information https://aws.amazon.com/about-aws/global-infrastructure here.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(27) Name of the Company & Contact information: The Trade Desk (Contact: privacy@thetradedesk.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Digital Advertising
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(28) Name of the Company & Contact information: Impact Radius (Contact: privacy@impact.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; subscriber information, and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Affiliate marketing and related analytics and operations
Country: United States
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(29) Name of the Company & Contact information: Validity (Return Path) (Contact: privacy@validity.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Email management
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(30) Name of the Company & Contact information: Movable Ink (Contact: privacy@movableink.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Email management
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(31) Name of the Company & Contact information: Litmus (Contact: privacy@litmus.com)
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Email rendering
Country: United States, European Union
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(32) Name of the Company & Contact information: Sentry.io (Contact: security@sentryio.com)
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Analytics (including crash reporting)
Country: United States, European Union
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(33) Name of the Company & Contact information: Apple https://www.apple.com/legal/privacy/contact Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Platform operations
Country: United States
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(34) Name of the Company & Contact information: Google (Android TV, Phones, Tablets) https://support.google.com/policies/contact/general_privacy_form">Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Platform operations
Country: Various Countries. See global services information https://www.google.com/about/datacenters/locations here
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose
(35) Name of the Company & Contact information: Amazon (Fire TV, Fire Tablet) (Contact: aws-korea-privacy@amazon.com)
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Platform operations
Country: Various Countries. See global services information https://www.amazon.com/gp/help/customer/display.html?nodeId=GCBBSZMUXA6U2P8R">here
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(36) Name of the Company & Contact information: LG (TV) (Contact: caprivacy@lge.com)
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Platform operations
Country: United States, South Korea
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(37) Name of the Company & Contact information: Samsung (TV) https://www.samsung.com/global/business/networks/contact-us Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Platform operations
Country: United States, South Korea, European Union, Australia
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(38) Name of the Company & Contact information: Sony (Playstation) http://www.playstation.com/support">Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Platform operations
Country: United States, United Kingdom, Japan
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(39) Name of the Company & Contact information: Microsoft Xbox https://www.microsoft.com/en-us/concern/privacy">Contact
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy.
Purpose: Platform operations
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose
(40) Name of the Company & Contact information: Adyen, N.V. (Contact: dpo@adyen.com)
Personal information to be transferred: Payment card information such as primary account number, card verification code and cardholder name, related transaction data, and other information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: Payment transaction related services, which include Processing of payment transactions, fraud detection, and other related services
Country: Various Countries. See global services information https://www.adyen.com/contact">here
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: When necessary for a purpose
(41) Name of the Company & Contact information: https://privacy.thewaltdisneycompany.com/en/definitions/#The-Walt-Disney-Family-of-Companies">The Walt Disney Family of Companies (Contact: twdc.kr.dpo@disney.com)
Personal information to be transferred: Personal Information as set forth in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy
Purpose: Business processing by the Company (including, providing and managing service access, providing security functions, customer support, communication with subscribers, product and service improvement, marketing and advertising, content development, compliance with laws and regulations, as described in the 'Use of Information' section of our privacy policy other purposes)
Country: Various Countries
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: When necessary for a purpose
3. Sharing of Information Third Parties
TWDC Korea will not share your information any other third party (other than for provision of D+ services as listed above) without your prior consent.
If you have consented to a provision of your information to any third party, the following details apply to you:
Local Companies
Recipient: Credit card companies: 1. KB Kookmin Card Corp., 2. BC Card Co., Ltd., 3. Lottecard Co., Ltd., 4. NongHyup Bank Co., Ltd. (NH Nonghyup Card), 5. Hyundai Card Corp., 6. Shinhancard Co., Ltd., 7. KEB Hana Card Co., Ltd., 8. Samsung Card Co., Ltd., etc.
Purpose of Provision: The purpose of provision of personal information is to proceed with verifying the validity of credit card information to be used for payment service and to make payment for the Disney+ service.
Personal Information to be Provided: For credit card information validation: Credit card number, expiration date and year, Date of Birth, first 2 digits of password/ For payment service: Credit card number, expiration date and year
Retention Period: The personal information provided shall not be separately stored by the third parties, after processing for the purpose set forth herein, as it is already possessed.
4. Your Control and Choices
Your Controls and Choices as detailed in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy shall also apply to the legal representatives in case of minors.
5. Data Security, Integrity and Retention
As specified in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy, the security, integrity and confidentiality of your information are extremely important to us. We take the following measures to ensure the safety of personal information.
a. Administrative Measures: For example, establishment and implementation of internal management plans, regular training on protection of your personal information.
b. Technical Measures: For example, management of access rights to personal information processing system, installation of access control system, encryption of unique identification information, installation of security programs.
c. Physical Measures: For example, limit access to personal information to https://privacy.thewaltdisneycompany.com/en/definitions/#The-Walt-Disney-Family-of-Companies">The Walt Disney Family of Companies, or as listed out in the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy. Those with access have strict confidentiality obligations under the contract, and breach of this obligation may result in sanctions or termination of the contract.
We retain your personal information in accordance with the https://privacy.thewaltdisneycompany.com/en/current-privacy-policy Privacy Policy, and for fulfillment of the purpose of collection and use. Some data may be retained when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, and storage of financial records etc.
6. Data Deletion
Except for cases in which we obtain separate consent from you or are obligated to preserve your personal information in accordance with relevant statutes, we will destroy your personal information when it becomes nonessential to store them, such as once we have met the required needs to process your personal information. Upon deletion, we will destroy your personal information recorded and stored in the form of electronic files or hard copies so that the records cannot be reproduced.
7. Personal Information Protection Officer
If you have a comment or question about this Policy, please contact our Personal Information Protection Officer details provided below:
Name: Hana Kim
Contact Details: TWDC.KR.DPO@disney.com
Contact number: 02-3490-2800
You can also make an access or correction request or a complaint in relation to personal information by sending an email to TWDC.KR.DPO@disney.com.
8. Effective date of this Policy
This Supplemental Privacy Policy for Republic of Korea will be effective from November 12, 2021.