Collection and use of information in Korea
Personal information collected and used by Airbnb and the purpose of its collection and use.
Information needed to use the Airbnb platform
We collect personal information about you when you use the Airbnb platform. Without it, we may not be able to provide all services requested.
- Contact information, account, profile information. Your first name, last name, phone number, email address, date of birth, profile photo, and verification information are required to use platform services including making reservations and providing hosting services. Postal address is required to provide hosting service.
- Payment information. Bank account or payment account information is required to receive payment.
Information automatically collected by using the Airbnb platform and our payment services
When you use the Airbnb platform and payment services, we automatically collect personal information.
- Geo-location information. Location determined from your IP address or mobile device’s GPS depending on your device settings. We may also collect this information when you’re not using the app if you enable this through your settings or device permissions.
- Usage information. he pages or content you view, searches for Listings, bookings you have made, and other actions on the Airbnb platform
- Log data and device information. Details about how you’ve used the Airbnb platform (including if you clicked on links to third party applications), IP address, access dates and times, hardware and software information, device information, device event information, unique identifiers, crash data, cookie data, and the pages you’ve viewed or engaged with before or after using the Airbnb platform. We may collect this information even if you haven’t created an Airbnb account or logged in.
- Cookies and similar technologies as described in our Cookie Policy
- Payment transaction information. Payment instrument used, date and time, payment amount, payment instrument expiration date, PayPal email address, IBAN information
Retention period
In principle, the company deletes users' personal information when they ask for data deletion or account withdrawal.
However, we may retain certain information as necessary for our legitimate business interests or to comply with legal obligations as explained from section 6.3 of our privacy policy. The specifics of the retaining information includes ‘Payout Instruments Data’ for legal compliance reasons, including anti money laundering, audit and financial regulatory compliance (related laws: 5(1)(e) of the GDPR; Irish Taxes Consolidation Act 1997 and related requirements; EU’s 5th Anti-Money Laundering Directive (Directive EU 2018/843) and related laws) and ‘Security Data (activity-related data, for example login events and the associated device information) and Security Connections (data relating to identifying devices and accounts, and differentiating payment instruments)’ for safety and security reasons (to identify multi party attempts of committing fraud on the platform) (related laws: 5(1)(f)) of the GDPR).
Personal information that has achieved the purpose of collection and use of personal information, such as data deletion request or service termination, is destroyed in a non-renewable way. In the case of electronic file types, technical methods are used to safely delete them so that they cannot be recovered or reproduced, and printed materials are destroyed by crushing or incineration.
Right to refuse to consent to collection and use of personal information
Users have the right to refuse consent to the collection and use of personal information. If you refuse to consent to the collection and use of the minimum personal information collected during the sign up process which is mandatory, it may be difficult to use our service.