개인정보 처리방침

Article 1 Purpose of processing personal information

• The company collects and processes the minimum amount of personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following purposes, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
• ① Customer inquiry processing: Personal information is processed for the purpose of identifying customers, checking requests and inquiries, contacting and notifying them for fact-finding, and notifying them of processing results.


• ② Handling of report of violation of the law: Personal information is processed to process complaints and reply to results of report of violation of the law.

Article 2 Processing and Retention Period of Personal Information

• ① The company processes and holds personal information within the period of retention and use of personal information in accordance with laws and regulations or within the period of personal information and use agreed upon when collecting personal information from the information subject.


• 
  ② Each personal information processing and retention period is as follows.
  • 1. Customer inquiry: Store for one year after processing customer inquiry or destroy immediately upon customer request
  
  
  • 2. Report of violation of the law: Keep it for one year after handling the report of violation of the law or immediately destroy it when requested by a customer
  
  
  • 3. Until the end of the relevant period in the following cases

    • 1) Storage of communication fact-checking data under the Communications Secret Protection Act

      
      
      • - Computer communication, Internet log record data, access point tracking data: 3 months
      
      
    
    
  
  

Article 3 Provision of personal information to third parties

The company processes the personal information of the data subject only within the scope specified in Article 1 (Purpose of processing personal information), and provides personal information to third parties only if it falls under Articles 17 and 18 of the Personal Information Protection Act.

Article 4 Entrustment of personal information processing and overseas transfer

• ① The company entrusts the personal information processing work as follows for smooth personal information processing.


• A consignee


• ② According to Article 26 of the Personal Information Protection Act, the company stipulates in documents such as contracts and supervises the handling of personal information, technical and administrative protection measures, re-entrustment restrictions, and damages.


• ③ In the case of some personal information, it is entrusted to overseas companies to provide services and improve user convenience
  • - Transfer recipient company name and contact information: Google LLC (https://analytics.google.com/)
  
  
  • - Country to be transferred: United States
  • - Transfer date and method: Transfer over the network at the time of use of visitor service within the website
  • - Personal information items to be transferred: collecting cookies, device browser-related data, IP addresses, site/app activities (personal identification information not sent)
  • - Purpose of use, retention, and duration of use of transfer recipients: for statistical measurement of user interactions occurring on the website (providing and maintaining IP address service security, informing user access country information), 38 months of user and event data storage
  
  


• 
  
  ④ If the contents of the entrusted work or the trustee change, we will disclose it through this personal information processing policy without delay.
  

Article 5 Rights, obligations, and methods of exercising the information subject and legal representative

• ① The information subject may exercise the right to the company at any time, such as requesting to view, correct, delete, or suspend processing of personal information.
• ② The exercise of rights under paragraph (1) may be made in writing, e-mail, etc. to the company pursuant to Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and the company will take action without delay.
• ③ The exercise of rights under paragraph (1) may be carried out through an agent, such as a legal representative of the information subject or a person delegated. In this case, "Notification of how to process personal information (No. 2020-7)" You must submit a power of attorney according to the attached Form 11.
• ④ Requests for suspension of personal information access and processing may be restricted by Article 35 (4) and Article 37 (2) of the Personal Information Protection Act.
• ⑤ A request for correction and deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws.
• ⑥ The company checks whether the person who made the request is himself or a legitimate agent when requesting access, correction or deletion, or suspension of processing according to the right of the information subject.

Article 6 Personal Information Items

• ① Personal information items (IP address, cookies, service history, name, email, contact number)
  

Article 7 Destruction of personal information

• ① If personal information becomes unnecessary, such as the lapse of the personal information retention period or the achievement of the purpose of processing, the relevant personal information shall be destroyed without delay.
• ② The personal information on which the reason for destruction has occurred is selected, and the personal information is destroyed according to the internal policy procedure under the responsibility of the company's personal information protection manager.
• ③ Personal information recorded and stored in the form of an electronic file is destroyed so that the record cannot be reproduced, and personal information recorded and stored in a paper document is destroyed by crushing or incinerating it with a shredder.

Article 8 Safety of Personal Information

• ① Management measures: Establishment and implementation of internal management plans, regular employee training, etc
• ② Technical measures: management of access rights such as personal information processing systems, installation of access control systems, encryption of unique identification information, installation of security programs/li>
• ③ Physical Measures: Access Control of Computer Room, Data Storage Room, etc

Article 9 Matters concerning the installation, operation, and rejection of automatic personal information collection devices

• ① The company uses 'cookies' that store usage information and bring it up from time to time to provide individual customized services to users.
• ② Cookies are a small amount of information that a server (http) that is used to run a website sends to a user's computer browser and are sometimes stored on a hard disk inside the user's PC computer.
• ③ The company analyzes visitors' use of the website using Google Analytics, a service provided by Google LLC ("Google").

Article 10 Person in charge of personal information protection

The person in charge of personal information processing is designated as follows for handling complaints and relief of damage related to personal information processing.

• ① Personal Information Protection Manager
  

Article 11 Methods of remedy for infringement of rights and interests

• ·Personal Information Infringement Reporting Center (run by the Korea Internet & Security Agency)


• 
  
  • - Duties under his/her jurisdiction: Report the infringement of personal information and apply for counseling
  • - Home page: privacy.kisa.or.kr
  • - Phone: (without country code) 118
  • - Address: (58324) 3rd floor, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2 Bitgaram-dong)
  
  


• ·Personal Information Dispute Mediation Committee


• 
  
  • - Affairs under the jurisdiction: Application for dispute settlement of personal information, collective dispute settlement (civil settlement)
  
  
  • - Homepage : www.kopico.go.kr
  
  
  • - Phone: (without country code) +82-1833-6972
  
  
  • - Address: (03171) (03171)서울특별시 종로구 세종대로 209 정부서울청사 12층
  
  


• ·the Supreme Prosecutors' Office's cybercrime investigation team


• 02-3480-3573 (www.spo.go.kr)


• ·National Police Agency Cyber Security Bureau


• 182 (https://cyberbureau.police.go.kr)

Article 12 Changes in personal information processing policy

Personal Information Processing Policy 2023. 10. 1