Supplemental Privacy Policy for Korea.

SUPPLEMENTAL PRIVACY POLICY FOR REPUBLIC OF KOREA

This supplement to our global privacy policy applies to the processing of personal information in the Republic of Korea (“Korea”) or of Korean residents and shall be read in conjunction with our Privacy Policy

1. Disney+ Subscribers in Korea- Collection and Use Statement

If you are a Disney+ subscriber in Korea, The Walt Disney Company (Korea), LLC (“TWDC Korea”) collects and uses the following information from you for the purpose of providing and enjoying Disney+ service in Korea:

A. List per the purpose of collection and use

(1) The Purpose of Collection and Use of Personal Information: Subscription and access to the Disney+ service (including user authentication and verification to find/reset an account or password including re-subscription upon cancellation of service)

Items of Personal Information Being Collected: Email address, Username (profile names), Password, IP address and related internet transaction data, Device and browser identifiers and related information, Other Information as set forth in the Privacy Policy

The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your subscription or as required by the relevant laws and regulations

(2) The Purpose of Collection and Use of Personal Information: Provision and operation of the Disney+ service (including content and feature delivery, personalization, security and protection against improper usage, content acquisition and development, maintenance, and improvement)

Items of Personal Information Being Collected: Email address, Username (profile names), IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Other information as set forth in the Privacy Policy

The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations

(3) The Purpose of Collection and Use of Personal Information: Payment processing, including invoicing, processing, re-subscription upon cancellation of service and refunds

Items of Personal Information Being Collected: Payment information including name, credit card or other payment method number, location information, CVV security code, and expiration date, Date of birth, PIN Code, First 2 digits of credit card PIN, Transaction history and related data, Subscription and entitlement information, Other Information as set forth in the Privacy Policy

The Duration of Use and Retention of Personal Information: Retained until request made for permanent deletion of your subscription or as required by the relevant laws and regulations

(4) The Purpose of Collection and Use of Personal Information: Customer service

Items of Personal Information Being Collected: Email address, Username (profile names), First and last name, Browser, device, account identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Payment and transaction information, Service settings and configuration, Other information as set forth in the Privacy Policy

The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations

(5) The Purpose of Collection and Use of Personal Information: Adult verification by verifying identity and age (including for subscription to the service and accessing particular content)

Items of Personal Information Being Collected: Name, Date of birth, Gender, Citizen/foreigner, Mobile number, Mobile carriers, Encrypted connecting information (CI), Duplicate subscription verification information (DI), Other information as set forth in the Privacy Policy

The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations

(6) The Purpose of Collection and Use of Personal Information: Marketing and advertising (including, email marketing; push notifications and in-app messaging; and other marketing services like retargeting, acquisition, modeling, and suppression)

Items of Personal Information Being Collected: Email address, IP Address and related internet transaction data, Browser and device identifiers and related information, User activity and playback data, Subscription and entitlement information, Other information as set forth in the Privacy Policy

The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose

(7) The Purpose of Collection and Use of Personal Information: Research and analytics

The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose

(8) The Purpose of Collection and Use of Personal Information: Platforms

Items of Personal Information Being Collected: IP address and related internet transaction data, Device and browser identifiers and related information, User activity data, Other information as set forth in the Privacy Policy

The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose

(9) The Purpose of Collection and Use of Personal Information: User choice management

Items of Personal Information Being Collected: IP address, internet transaction data, cookies, device and browser identifiers and related information, user activity data, Other Information as set forth in the Privacy Policy

The Duration of Use and Retention of Personal Information: Retained until the cancellation or termination of subscription or as required by the relevant laws and regulations

(10) The Purpose of Collection and Use of Personal Information: Business processing within The Walt Disney Family of Companies in accordance with the section titled “Use of Information by the Walt Disney Family of Companies” in the Privacy Policy

Items of Personal Information Being Collected: Email address, Username (profile names), First and last name, IP Address and related internet transaction data, Browser and device identifiers and related information, General location information, User activity and playback data, Subscription and entitlement information, Service settings and configuration, Other information as set forth in the Privacy Policy

The Duration of Use and Retention of Personal Information: For the period necessary to achieve the purpose

B. Right to Refuse Consent/ Disadvantage upon any Refusal to Consent

You may decline our request to collect and use your personal information. However, please note that you may not be able to use Disney+ or may be restricted to certain services without providing your personal information.

2. Sharing of information with Third Parties for provision of Disney+ services

TWDC Korea entrusts the processing of following personal information to third parties to provide D+ services to you:

[Entrusted Parties for Personal Information Handling]

Local Companies

(1) Name of the Company: Korea Credit Bureau

Details of the Entrusted work: Support services of Adult verification and Identify verification

(2) Name of the Company: NHN KCP Corp.

Details of the Entrusted work: Support services of online payments and Credit card information validation

(3) Name of the Company: Kakao Corp.

Details of the Entrusted work: Support targeted ads based on user behavior, use browser cookie or mobile advertiser id (e.g. ADID, IDFA)

(4) Name of the Company: Naver Corp.

Details of the Entrusted work: Support targeted ads based on user behavior, use browser cookie or mobile advertiser id (e.g. ADID, IDFA)

(5) Name of the Company: Transcosmos Korea Inc.

Details of the Entrusted work: Customer service support

Cross-border transfer of personal information

(1) Name of the Company & Contact information: Akamai Contact

Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data

Purpose: Content delivery, caches busting, and other related services

Country: Various countries. See global network information here.

Transfer Date/ Transfer Method: When using the service/ Electronic method

Retention period: For the period necessary to achieve the purpose

(2) Name of the Company & Contact information: Fastly (Contact: abuse@fastly.com)

Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data

Purpose: Content delivery and other related services

Country: Various countries. See global network information here.

Transfer Date/ Transfer Method: When using the service/ Electronic method

Retention period: For the period necessary to achieve the purpose

(3) Name of the Company & Contact information: Century Link Contact

Personal information to be transferred: IP Address and related internet transaction data; browser and device identifiers and information; user activity data

Purpose: Content delivery and other related services

Country: Various countries. See global network information here.

Transfer Date/ Transfer Method: When using the service/ Electronic method

Retention period: For the period necessary to achieve the purpose

(4) Name of the Company & Contact information: Conviva (Contact: privacy@conviva.com)

Personal information to be transferred: IP address, and related internet transaction data, cookies, device and browser identifiers and information, user activity and playback data, and other information as listed in the Privacy Policy

Purpose: Video playback and engagement information and other related analytics.

Country: United States

Transfer Date/ Transfer Method: When using the service/ Electronic method

Retention period: For the period necessary to achieve the purpose

(5) Name of the Company & Contact information: Braze Contact

Personal information to be transferred: IP address and related internet transaction data; device identifiers; user activity and other account data, and other information as listed in the Privacy Policy

Purpose: In app and push marketing and service notifications

Country: United States, Singapore, Germany, Japan, United Kingdom

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(6) Name of the Company & Contact information: Google Double Click, Floodlight Contact

Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data, and other information as listed in the Privacy Policy

Purpose: Marketing (including paid media optimization and ad tracking)

Country: Various countries. See global services information here.

Transfer Date/ Transfer Method: When using the service/ Electronic method

Retention period: For the period necessary to achieve the purpose

(7) Name of the Company & Contact information: Flashtalking (Contact: privacy@flashtalking.com)

Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy

Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)

Country: United States, United Kingdom, Germany, Netherlands, France, Italy, Poland, Australia, Singapore, Hong Kong

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(8) Name of the Company & Contact information: Microsoft Contact

Personal information to be transferred: IP Address; device information, user activity; crash information; and other information as listed in the Privacy Policy

Purpose: Crash analytics for Xbox version of application only.

Country: United States, Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom

Transfer Date/ Transfer Method: When using the service/ Electronic method

Retention period: For the period necessary to achieve the purpose

(9) Name of the Company & Contact information: New Relic (Contact: privacy@newrelic.com)

Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity and playback data; and other information as listed in the Privacy Policy

Purpose: Analytics, measurement of application and services quality and health

Country: United States, European Union

Transfer Date/ Transfer Method: When using the service/ Electronic method

Retention period: For the period necessary to achieve the purpose

(10) Name of the Company & Contact information: Optimizely (Contact: privacy@optimizely.com)

Purpose: A/B & Multi-variant testing

Country: United States, European Union, Vietnam, Australia, South Africa

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(11) Name of the Company & Contact information: TRUSTe (Contact: privacy@trustarc.com)

Purpose: User choice management

Country: United States, Ireland, Germany

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(12) Name of the Company & Contact information: Amazon Web Services (Contact: aws-korea-privacy@amazon.com)

Personal information to be transferred: Personal Information as set forth in the Privacy Policy

Purpose: Infrastructure and IT support and related services (including data storage and management)

Country: Various Countries. See global services information here.

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(13) Name of the Company & Contact information: ServiceNow (Contact: privacy@servicenow.com)

Personal information to be transferred: Personal Information as set forth in the Privacy Policy

Purpose: Providing customer support

Country: United States, Canada, South Korea, Singapore, Germany, Switzerland, Netherlands, Ireland, United Kingdom, Japan, Australia, Brazil

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(14) Name of the Company & Contact information: SnowFlake (Contact: privacy@snowflake.com)

Personal information to be transferred: Personal Information as set forth in the Privacy Policy

Purpose: Infrastructure and IT support and related services (including data storage and management)

Country: Various countries. See global services information here.

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(15) Name of the Company & Contact information: Salesforce Contact

Personal information to be transferred: Personal Information as set forth in the Privacy Policy

Purpose: Marketing (including email marketing) and Customer Support

Country: Various countries. See global services information here.

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(16) Name of the Company & Contact information: Adobe Contact

Purpose: Analytics and user choice management

Country: United States, Irealand

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(17) Name of the Company & Contact information: Qualtrics (Contact: privacy@qualtrics.com)

Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; email address and other subscriber information, and other information as listed in the Privacy Policy

Purpose: Surveys and user communications

Country: United States

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(18) Name of the Company & Contact information: Zendesk (Contact: privacy@zendesk.com)

Personal information to be transferred: Personal Information as set forth in the Privacy Policy

Purpose: Customer Support

Country: United States, European Economic Area, Japan, Australia

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(19) Name of the Company & Contact information: Facebook (Contact: korealocalagent@support.facebook.com)

Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; hashed email address and other subscriber information, and other information as listed in the Privacy Policy

Purpose: Digital Advertising

Country: Various Countries. See global services information here.

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(20) Name of the Company & Contact information: Twitter Contact

Purpose: Digital Advertising

Country: United States, Ireland

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(21) Name of the Company & Contact information: Google Ads Contact

Purpose: Digital Advertising

Country: Various Countries. See global services information here

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(22) Name of the Company & Contact information: Microsoft Bing Contact

Purpose: Digital Advertising

Country: United States, Australia, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, Netherlands, Singapore, South Africa, United Kingdom

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(23) Name of the Company & Contact information: Yahoo Gemini Contact

Purpose: Digital Advertising

Country: United States, European Union

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(24) Name of the Company & Contact information: Apple Search Ads Contact

Purpose: Digital Advertising

Country: United States

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(25) Name of the Company & Contact information: Oath Contact

Purpose: Digital Advertising

Country: United States, European Union

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(26) Name of the Company & Contact information: Amazon DSP Contact Us

Purpose: Digital Advertising

Country: Various Countries. See global services information here

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(27) Name of the Company & Contact information: The Trade Desk (Contact: privacy@thetradedesk.com)

Purpose: Digital Advertising

Country: United States, European Union

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(28) Name of the Company & Contact information: Impact Radius (Contact: privacy@impact.com)

Personal information to be transferred: IP address and related internet transaction data; cookies; device and browser identifiers and information; user activity data; subscriber information, and other information as listed in the Privacy Policy

Purpose: Affiliate marketing and related analytics and operations

Country: United States

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(29) Name of the Company & Contact information: Validity (Return Path) (Contact: privacy@validity.com)

Purpose: Email management

Country: United States, European Union

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(30) Name of the Company & Contact information: Movable Ink (Contact: privacy@movableink.com)

Purpose: Email management

Country: United States, European Union

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(31) Name of the Company & Contact information: Litmus (Contact: privacy@litmus.com)

Purpose: Email rendering

Country: United States, European Union

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(32) Name of the Company & Contact information: Sentry.io (Contact: security@sentryio.com)

Personal information to be transferred: IP address and related internet transaction data; device and browser identifiers and information; user activity data; and other information as listed in the Privacy Policy

Purpose: Analytics (including crash reporting)

Country: United States, European Union

Transfer Date/ Transfer Method: When using the service/ Electronic method

Retention period: For the period necessary to achieve the purpose

(33) Name of the Company & Contact information: Apple Contact

Purpose: Platform operations

Country: United States

Transfer Date/ Transfer Method: When using the service/ Electronic method

Retention period: For the period necessary to achieve the purpose

(34) Name of the Company & Contact information: Google (Android TV, Phones, Tablets) Contact

Purpose: Platform operations

Country: Various Countries. See global services information here

Transfer Date/ Transfer Method: When using the service/ Electronic method

Retention period: For the period necessary to achieve the purpose

(35) Name of the Company & Contact information: Amazon (Fire TV, Fire Tablet) (Contact: aws-korea-privacy@amazon.com)

Purpose: Platform operations

Country: Various Countries. See global services information here

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(36) Name of the Company & Contact information: LG (TV) (Contact: caprivacy@lge.com)

Purpose: Platform operations

Country: United States, South Korea

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(37) Name of the Company & Contact information: Samsung (TV) Contact

Purpose: Platform operations

Country: United States, South Korea, European Union, Australia

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(38) Name of the Company & Contact information: Sony (Playstation) Contact

Purpose: Platform operations

Country: United States, United Kingdom, Japan

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(39) Name of the Company & Contact information: Microsoft Xbox Contact

Purpose: Platform operations

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(40) Name of the Company & Contact information: Adyen, N.V. (Contact: dpo@adyen.com)

Personal information to be transferred: Payment card information such as primary account number, card verification code and cardholder name, related transaction data, and other information as set forth in the Privacy Policy

Purpose: Payment transaction related services, which include Processing of payment transactions, fraud detection, and other related services

Country: Various Countries. See global services information here

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: When necessary for a purpose

(41) Name of the Company & Contact information: The Walt Disney Family of Companies (Contact: twdc.kr.dpo@disney.com)

Personal information to be transferred: Personal Information as set forth in the Privacy Policy

Purpose: Business processing by the Company (including, providing and managing service access, providing security functions, customer support, communication with subscribers, product and service improvement, marketing and advertising, content development, compliance with laws and regulations, as described in the 'Use of Information' section of our privacy policy other purposes)

Country: Various Countries

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: When necessary for a purpose

(42) Name of the Company & Contact information: TikTok Inc. Contact

Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)

Country: United States

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(43) Name of the Company & Contact information: ROKT Corp. (Contact: privacy@rokt.com)

Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)

Country: United States, European Union, Singapore, United Kingdom, Australia, Japan

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(44) Name of the Company & Contact information: Oracle America Inc. (Bluekai) Contact

Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)

Country: United States, European Union

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(45) Name of the Company & Contact information: Webhelp S.A.S. (Contact: privacy@webhelp.com)

Personal information to be transferred: Name; email address; payment method; last 4 digits of payment card; device types; order number and other information to handle customer service

Purpose: Customer service supports via phone and chat

Country: France, South Korea, Malaysia

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations

(46) Name of the Company & Contact information: Support Services Group (Contact: privacy@s2g.net)

Personal information to be transferred: Name, email address, payment method, last 4 digits of payment card, device types, order number and other information to handle customer service

Purpose: Customer service supports via phone and chat

Country: United States, Philippines, Canada, South Korea, Malaysia

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose or as required by the relevant laws and regulations

(47) Name of the Company & Contact information: InMobi (Contact: privacy@inmobi.com)

Purpose: Marketing and advertising analytics (including, ad tracking for multi-touch attribution)

Country: United States, European Union, United Kingdom

Transfer Date/ Transfer Method: When necessary for a purpose/ Electronic method

Retention period: For the period necessary to achieve the purpose

(48) Name of the Company & Contact information: TrafficGuard (Contact: privacy@trafficguard.ai)

Personal information to be transferred: IP address and related internet transaction data; browser and device identifiers and information; user activity data

Purpose: Content delivery, caches busting, and other related services

Country: Various countries. See global network information here.

Transfer Date/ Transfer Method: When using the service/ Electronic method

Retention period: For the period necessary to achieve the purpose

3. Sharing of Information Third Parties

TWDC Korea will not share your information any other third party (other than for provision of D+ services as listed above) without your prior consent.

If you have consented to a provision of your information to any third party, the following details apply to you:

Local Companies

Recipient: Credit card companies: 1. KB Kookmin Card Corp., 2. BC Card Co., Ltd., 3. Lottecard Co., Ltd., 4. NongHyup Bank Co., Ltd. (NH Nonghyup Card), 5. Hyundai Card Corp., 6. Shinhancard Co., Ltd., 7. KEB Hana Card Co., Ltd., 8. Samsung Card Co., Ltd., etc.

Purpose of Provision: The purpose of provision of personal information is to proceed with verifying the validity of credit card information to be used for payment service and to make payment for the Disney+ service.

Personal Information to be Provided: For credit card information validation: Credit card number, expiration date and year, Date of Birth, first 2 digits of password/ For payment service: Credit card number, expiration date and year

Retention Period: The personal information provided shall not be separately stored by the third parties, after processing for the purpose set forth herein, as it is already possessed.

4. Your Control and Choices

Your Controls and Choices as detailed in the Privacy Policy shall also apply to the legal representatives in case of minors.

5. Data Security, Integrity and Retention

As specified in the Privacy Policy, the security, integrity and confidentiality of your information are extremely important to us. We take the following measures to ensure the safety of personal information.

a. Administrative Measures: For example, establishment and implementation of internal management plans, regular training on protection of your personal information.

b. Technical Measures: For example, management of access rights to personal information processing system, installation of access control system, encryption of unique identification information, installation of security programs.

c. Physical Measures: For example, limit access to personal information to The Walt Disney Family of Companies, or as listed out in the Privacy Policy. Those with access have strict confidentiality obligations under the contract, and breach of this obligation may result in sanctions or termination of the contract.

We retain your personal information in accordance with the Privacy Policy, and for fulfillment of the purpose of collection and use. Some data may be retained when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, and storage of financial records etc.

6. Data Deletion

Except for cases in which we obtain separate consent from you or are obligated to preserve your personal information in accordance with relevant statutes, we will destroy your personal information when it becomes nonessential to store them, such as once we have met the required needs to process your personal information. Upon deletion, we will destroy your personal information recorded and stored in the form of electronic files or hard copies so that the records cannot be reproduced.

7. Personal Information Protection Officer

If you have a comment or question about this Policy, please contact our Personal Information Protection Officer details provided below:

Name: Hana Kim

Contact Details: TWDC.KR.DPO@disney.com

Contact number: 02-3490-2800

You can also make an access or correction request or a complaint in relation to personal information by sending an email to TWDC.KR.DPO@disney.com.

8. Effective date of this Policy

This Supplemental Privacy Policy for Republic of Korea will be effective from October 13, 2022.

Archive to Previous Supplemental Privacy Policy