This supplement to our global privacy policy applies to the processing of personal information in the Republic of Korea (“Korea”) or of Korean residents and shall be read in conjunction with our Privacy Policy.
1. Collection and Use Statement of Personal Information
The data controller of your personal information is The Walt Disney Company (Korea), LLC (“TWDC Korea”). TWDC Korea collects and uses the following information from you for the purposes listed below:
- List per the purpose of collection and use
- The Purpose of Collection and Use of Personal Information: Subscription and access to any services and products of the Walt Disney Family of Companies including Disney+ service (for example user authentication and verification to find/reset an account or password including re-subscription upon cancellation of service).
Items of Personal Information Being Collected: Email address, Username (profile names), Password, IP address and related internet transaction data, Device and browser identifiers and related information, Date of birth, Gender, Billing Address, Home Address and Telephone number (including mobile number).
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your account or as required by the relevant laws and regulations. - The Purpose of Collection and Use of Personal Information: Provision and operation of the Disney+ service (including content and feature delivery, personalization, security and protection against improper usage, content acquisition and development, maintenance, and improvement).
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, Date of birth, Gender, User activity and playback data, Subscription and entitlement information, Service settings and configuration.
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations. - The Purpose of Collection and Use of Personal Information: Payment processing, including invoicing, processing, re-subscription upon cancellation of service and refunds.
Items of Personal Information Being Collected: Payment information including name, credit card or other payment method number, location information, CVV security code, and expiration date, Date of birth, PIN Code, First 2 digits of credit card PIN, Transaction history and related data, Subscription and entitlement information.
The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your subscription or as required by the relevant laws and regulations. - The Purpose of Collection and Use of Personal Information: Customer service.
Items of Personal Information Being Collected: Email address, Username (profile names), First and last name, Browser, device, account identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Payment and transaction information, Service settings and configuration, Home Address, Billing Address, and Telephone number (including mobile number).
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations. - The Purpose of Collection and Use of Personal Information: Adult verification by verifying identity and age (including for subscription to the service and accessing particular content).
Items of Personal Information Being Collected: Name, Date of birth, Gender, Citizen/foreigner, Mobile number, Mobile carriers, Encrypted connecting information (CI), Duplicate subscription verification information (DI).
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations. - The Purpose of Collection and Use of Personal Information: Marketing and advertising (including, email marketing (subject to obtaining necessary consents); push notifications and in-app messaging; and other marketing services like retargeting, acquisition, modeling, and suppression).
Items of Personal Information Being Collected: Email address, IP Address and related internet transaction data, Browser and device identifiers and related information, User activity and playback data, Subscription and entitlement information, Date of birth and Gender.
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose. - The Purpose of Collection and Use of Personal Information: Research and analytics.
Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Date of birth and Gender.
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose. - The Purpose of Collection and Use of Personal Information: Advertisement Service Providers.
Items of Personal Information Being Collected: IP address and related internet transaction data, Device and browser identifiers and related information, User activity data.
The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose. - The Purpose of Collection and Use of Personal Information: User choice management.
Items of Personal Information Being Collected: IP address, internet transaction data, cookies, device and browser identifiers and related information, user activity data, Date of birth and Gender.
The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations.
- The Purpose of Collection and Use of Personal Information: Subscription and access to any services and products of the Walt Disney Family of Companies including Disney+ service (for example user authentication and verification to find/reset an account or password including re-subscription upon cancellation of service).
- Right to Refuse Consent/ Disadvantage upon any Refusal to Consent
You may decline our request to collect and use your personal information. However, please note that you may not be able to use or may be restricted from using Disney+ without providing your personal information.
2. Sharing of information with Third Parties for provision of Disney+ services
TWDC Korea entrusts the processing of following personal information to third parties to provide D+ services to you:
Entrusted Parties for Personal Information Handling
- Local Companies
- Name of the Company: Korea Credit Bureau
Details of the Entrusted work: Support services of Adult verification and Identify verification. - Name of the Company: NHN KCP Corp.
Details of the Entrusted work: Support services of online payments and Credit card information validation. - Name of the Company: Kakao Corp., Naver Corp.
Details of the Entrusted work: Support targeted ads based on user behavior, use browser cookie or mobile advertiser id (e.g., ADID, IDFA). - Name of the Company: Transcosmos Korea Inc.
Details of the Entrusted work: Customer service support. - Name of the Company: Planets Co., Ltd., Webs Creative Co., Ltd., Zestad Co., Ltd., Connect B Global Co., Ltd., JXD Entertainment Co., Ltd., Hi Difference Co., Ltd.
Details of the Entrusted work: Marketing event management, Execution of marketing event and sending giveaways or products, Planning of marketing event and processing of related works.
- Name of the Company: Korea Credit Bureau
- Cross-border transfer of personal information
Right to refuse cross-border transfer and disadvantages for refusal of transfer: You may choose not to transfer your personal information overseas by deleting your account. In such an event you will not be able to use or may be restricted from signing up to any product or services of the Walt Disney Family of Companies including access to Disney+.- Name of the Company: Akamai.
Contact: Akamai’s Privacy Team.
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data.
Purpose: Content delivery, caches busting, and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Fastly.
Contact: Fastly’s Privacy Team.
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data.
Purpose: Content delivery and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Century Link.
Contact: Privacy@CenturyLink.com.
Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data.
Purpose: Content delivery and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Conviva.
Contact: privacy@conviva.com.
Personal information to be transferred: IP address, and related internet transaction data, cookies, device and browser identifiers and information, user activity and playback data, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Video playback and engagement information and other related analytics.
Country: United States.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Braze.
Contact: Privacy Request.
Personal information to be transferred: IP address and related internet transaction data; device identifiers; user activity and other account data, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: In app and push marketing and service notifications.
Country: United States, Singapore, Germany, Japan, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Google Double Click, Floodlight.
Contact: Privacy Help Centre.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing (including paid media optimization and ad tracking).
Country: Various countries. See global services information.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Flashtalking.
Contact: privacy@flashtalking.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States, United Kingdom, Germany, Netherlands, France, Italy, Poland, Australia, Singapore, Hong Kong.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Microsoft.
Contact: Privacy Help.
Personal information to be transferred: IP Address; device information, user activity; crash information; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Crash analytics for Xbox version of application only.
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom.
Transfer Date/ Transfer Method: When using the service/ Electronic method
Retention period: For the period necessary to achieve the purpose. - Name of the Company: New Relic.
Contact: privacy@newrelic.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Analytics, measurement of application and services quality and health
Country: United States, European Union.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Optimizely.
Contact: privacy@optimizely.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: A/B & Multi-variant testing.
Country: United States, European Union, Vietnam, Australia, South Africa.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose. - Name of the Company: TRUSTe.
Contact: privacy@trustarc.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: User choice management.
Country: United States, Ireland, Germany.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Amazon Web Services.
Contact: aws-korea-privacy@amazon.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Infrastructure and IT support and related services (including data storage and management).
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: ServiceNow.
Contact: privacy@servicenow.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Providing customer support.
Country: United States, Canada, South Korea, Singapore, Germany, Switzerland, Netherlands, Ireland, United Kingdom, Japan, Australia, Brazil.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: SnowFlake.
Contact: privacy@snowflake.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Infrastructure and IT support and related services (including data storage and management).
Country: Various countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Salesforce.
Contact: Privacy Help.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing (including email marketing) and Customer Support.
Country: Various countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Adobe.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Analytics and user choice management.
Country: United States, Ireland.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Qualtrics.
Contact: privacy@qualtrics.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Surveys and user communications.
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Zendesk.
Contact: privacy@zendesk.com.
Personal information to be transferred: Personal Information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Customer Support.
Country: United States, European Economic Area, Japan, Australia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Facebook (Meta).
Contact: korealocalagent@support.facebook.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Twitter.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, Ireland.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Google Ads.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Microsoft Bing.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, Australia, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Yahoo Gemini.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Apple Search Ads.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Oath.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Amazon DSP.
Contact: Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose. - Name of the Company: The Trade Desk.
Contact: privacy@thetradedesk.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Digital Advertising.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Impact Radius.
Contact: privacy@impact.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; subscriber information, and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Affiliate marketing and related analytics and operations.
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Validity (Return Path).
Contact: privacy@validity.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Email management.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Movable Ink.
Contact: privacy@movableink.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Email management.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Litmus.
Contact: privacy@litmus.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Email rendering.
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Sentry.io.
Contact: security@sentryio.com.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Analytics (including crash reporting).
Country: United States, European Union.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Apple.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Google (Android TV, Phones, Tablets).
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Amazon (Fire TV, Fire Tablet).
Contact: aws-korea-privacy@amazon.com.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company & Contact information: LG (TV).
Contact: caprivacy@lge.com.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, South Korea.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Samsung (TV).
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, South Korea, European Union, Australia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Sony (Playstation).
Contact: Help.
Personal information to be transferred: IP address and related internet transaction data;
device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, United Kingdom, Japan.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Microsoft Xbox.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Platform operations.
Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Adyen, N.V.
Contact: dpo@adyen.com.
Personal information to be transferred: Payment card information such as primary account number, card verification code and cardholder name, related transaction data, and other information as set forth in the Types of Information we collect in our Privacy Policy.
Purpose: Payment transaction related services, which include Processing of payment transactions, fraud detection, and other related services.
Country: Various Countries. See global services information.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: When necessary for a purpose. - Name of the Company: TikTok Inc.
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: ROKT Corp.
Contact: privacy@rokt.com.
Personal information to be transferred: IP address and related internet transaction data;
cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy.
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)
Country: United States, European Union, Singapore, United Kingdom, Australia, Japan.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Oracle America Inc. (Bluekai).
Contact: Privacy Help.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy .
Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States, European Union.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Webhelp S.A.S.
Contact: privacy@webhelp.com.
Personal information to be transferred: Name; email address; payment method; last 4 digits of payment card; device types; order number and other information to handle customer service.
Purpose: Customer service supports via phone and chat.
Country: France, South Korea, Malaysia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations. - Name of the Company: Support Services Group.
Contact: privacy@s2g.net.
Personal information to be transferred: Name, email address, payment method, last 4 digits of payment card, device types, order number and other information to handle customer service.
Purpose: Customer service supports via phone and chat.
Country: United States, Philippines, Canada, South Korea, Malaysia.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations. - Name of the Company: InMobi.
Contact: privacy@inmobi.com.
Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Types of Information we collect in our Privacy Policy. Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution).
Country: United States, European Union, United Kingdom.
Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: Traffic Guard.
Contact: privacy@trafficguard.ai.
Personal information to be transferred: IP address and related internet transaction data;
browser and device identifiers and information; user activity data.
Purpose: Content delivery, caches busting, and other related services.
Country: Various countries. See global network information.
Transfer Date/ Transfer Method: When using the service/ Electronic method.
Retention period: For the period necessary to achieve the purpose. - Name of the Company: The Walt Disney Company Group of Companies
Contact: twdc.kr.dpo@disney.com
Personal Information to be transferred: Email address, Username (profile names), First and last name, password, IP Address and related internet transaction data, Date of birth, Gender, Billing Address, Home Address, Payment method and related information, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration
Purpose: Disney+ Service operation and provision, Service access provision and management, Security management, Payment processing, Customer support, Communication with users, Research and analytics, Product and service improvement, Marketing and promotion (in case of email communication, subject to required consent), Development of contents, including legal compliance.
Country: Various countries. See Data Controller for each territory.
Transfer Date/ Transfer Method: When using the service or necessary for purpose/ Electronic method
Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations.
- Name of the Company: Akamai.
3. Provision of Information to Third Parties and Overseas transfer of Personal Information
TWDC Korea will not share your information any other third party (other than for provision of D+ services as listed above) without your prior consent. If you have consented to a provision of your information to any third party, the following details apply to you:
- Recipient: Credit card companies: 1. KB Kookmin Card Corp., 2. BC Card Co., Ltd., 3. Lottecard Co., Ltd., 4. NongHyup Bank Co., Ltd. (NH Nonghyup Card), 5. Hyundai Card Corp., 6. Shinhancard Co., Ltd., 7. KEB Hana Card Co., Ltd., 8. Samsung Card Co., Ltd., and other credit card companies).
Purpose of Provision: The purpose of provision of personal information is to proceed with verifying the validity of credit card information to be used for payment service and to make payment for the Disney+ service.
Personal Information to be Provided: For credit card information validation: Credit card number, expiration date and year, Date of Birth, first 2 digits of password/ For payment service: Credit card number, expiration date and year.
Retention Period: The personal information provided shall not be separately stored by the third parties, after processing for the purpose set forth herein, as it is already possessed. - Cross-border Transferring/Provision
Third parties receiving personal information: The Walt Disney Family of Companies.
Items of personal information to be transferred: Email address, Username (profile names), First and last name, password, IP Address and related internet transaction data, Date of birth, Gender, Billing Address, Home Address, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration.
Country to which personal information is transferred: United States.
Method, date and time of transfer: Transmitted through the network when using the service.
Purpose of use: Creation of unified Disney account; subscription and access to products and services of the Walt Disney family of Companies; provision and operation of the service, payment processing, customer service, marketing and advertising (subject to obtaining necessary consents), research and development, business processing, advertising partners, any other purpose that may be required for the operation and management of the products and services.
Retention and use period: Retained until request made for permanent deletion of your membership/subscription or as required by the relevant laws and regulations.
Right to refuse consent and disadvantages for refusal of consent: By not signing up for services of The Walt Disney Family of Companies or permanently deleting your account, you may refuse to our overseas provision of personal information as above. However, if you refuse, you may not be able to create a Disney account or log in to your account and you may not be able to access the products and services provided by The Walt Disney Family of Companies.
4. Your Control and Choices
Your Controls and Choices as detailed in the Privacy Policy shall also apply to the legal representatives in case of minors.
5. Data Security, Integrity and Retention
As specified in the Privacy Policy the security, integrity and confidentiality of your information are extremely important to us. We take the following measures to ensure the safety of personal information.
- Administrative Measures: For example, establishment and implementation of internal management plans, regular training on protection of your personal information.
- Technical Measures: For example, management of access rights to personal information processing system, installation of access control system, encryption of unique identification information, installation of security programs.
- Physical Measures: For example, limit access to personal information to The Walt Disney Family of Companies as listed out in the Privacy Policy. Those with access have strict confidentiality obligations under the contract, and breach of this obligation may result in sanctions or termination of the contract.
We retain your personal information in accordance with the Privacy Policy, and for fulfillment of the purpose of collection and use. Some data may be retained when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, and storage of financial records etc. We retain following personal information in accordance with applicable laws and regulations.
6. Data Deletion
Except for cases in which we obtain separate consent from you or are obligated to preserve your personal information in accordance with relevant statutes, we will destroy your personal information with the approval of Personal Information Protection Officer when it becomes nonessential to store them, such as once we have met the required needs to process your personal information. Upon deletion, we will destroy your personal information recorded and stored in the form of electronic files or hard copies so that the records cannot be reproduced.
7. Personal Information Protection Officer
If you have a comment or question about this Policy, please contact our Personal Information Protection Officer details provided below:
Name: Hana Kim
Contact Details: TWDC.KR.DPO@disney.com
Contact number: 02-3490-2800
You can also make an access or correction request or a complaint in relation to personal information by sending an email to TWDC.KR.DPO@disney.com.
8. Effective date of this Policy
This Supplemental Privacy Policy for Republic of Korea will be effective from February 5, 2024.