The company name (hereinafter referred to as the'Company') establishes the following personal information processing guidelines in order to protect the personal information of the information subject in accordance with Article 30 of the Personal Information Protection Act and to promptly and smoothly deal with complaints related thereto. To the public.
Article 1 (Purpose of processing personal information) The
company processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use is changed, we will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
1. Homepage membership registration and management
Confirmation of membership registration, identification and authentication of members by providing membership service, maintenance and management of membership, identification by enforcement of limited identity verification system, prevention of illegal use of service, personal information of children under 14 years of age When processing, personal information is processed for the purpose of confirming the consent of the legal representative, handling various notices, notifications, and grievances.
2. Providing goods or services
We process personal information for the purpose of product delivery, service delivery, contract and invoice delivery, content delivery, personalized service delivery, personal authentication, age authentication, payment and settlement, and debt collection.
3. Grievance handling
Personal information is processed for the purpose of verifying the identity of the complainant, confirming the complaint, contacting and notifying for fact investigation, and notifying the result of processing.
Article 2 (Processing and retention period of personal information)
① The company processes and retains personal information within the period of retention and use of personal information in accordance with the law or during the period of retention and use of personal information agreed upon when collecting personal information from the data subject.
② Each personal information processing and retention period is as follows.
1. Membership and management of homepage membership: until the withdrawal from the homepage of the operator/group
, but until the end of the applicable case in the following cases:
1) In the event of investigation or investigation in violation of related laws, until the relevant investigation and investigation are completed
2) If the bond and debt relationship remains due to the use of the website, until the relevant bond and debt relationship is settled. 2. Provide goods or services: Until the supply of goods and services is completed, and the payment and settlement are completed , but if the following reasons apply: Until the end of the period 1) Records related to transactions such as labeling/advertising, contract details and performance in accordance with 「Act on Consumer Protection in Electronic Commerce, etc.」 - Records regarding labeling and advertising: June -Withdrawal of contract or subscription, payment , Records of supply of goods, etc.: 5 years -Records of handling consumer complaints or disputes: 3 years 2) Storage of communication fact confirmation data in accordance with Article 41 of the 「Communication Secrets Protection Act」-Subscriber telecommunication date and time, start/end time, subscriber Number, frequency of use, location tracking data of the originating base station: 1 year -Computer communication, internet log records, access tracking data: 3 months
Article 3 (Provided by a third party
of personal information ) ① The company processes the personal information of the information subject only within the scope specified in Article 1 (the purpose of processing personal information), and personal information such as consent of the information subject, special provisions of the law, etc. Personal information will be provided to third parties only in accordance with Article 17 of the Information Protection Act.
② The company provides personal information to third parties as follows.
-Those who receive personal information:
Purpose of using personal information of the recipient:
-Personal information items provided:
-Retention and use period of the recipient: Article 4 (Consignment of personal information processing) ① Company For smooth personal information processing, we entrust the following personal information processing business. 1. Operation of telephone consultation center -Consigned person (trustee): OOO CS center -Contents of entrusted work: Telephone consultation, department and staff information, etc. 2. A/S center operation -Consigned person (trustee): OOO Electronics -Contents of entrusted work: Providing product A/S for customers
② When signing a consignment contract, the company contracts matters related to responsibilities such as prohibition of processing personal information, technical and administrative protection measures, restrictions on re-trust, management/supervision of trustees, and compensation for damages in accordance with Article 25 of the Personal Information Protection Act. Etc., and supervise whether the trustee handles personal information safely.
③ If the contents of the consignment service or the trustee are changed, we will disclose it through this personal information processing policy without delay.
Article 5 (Rights of users and legal representatives and how to exercise them)
① The data subject can exercise the following personal information protection rights to the company at any time.
1. Request for access to personal information
2. Request for correction if there is an error
3. Request for deletion
4. Request for suspension of processing
② Exercise of rights pursuant to Paragraph 1 shall be made in writing, telephone, e-mail, fax, etc. You can do it through and the company will take action on it without delay.
③ If the information subject requests correction or deletion of personal information errors, the company will not use or provide the personal information until the correction or deletion is completed.
④ The exercise of rights pursuant to paragraph (1) may be made through a legal representative of the data subject or an agent such as a person who has been delegated. In this case, you must submit a power of attorney in accordance with Appendix 11 of the Enforcement Rules of the Personal Information Protection Act.
⑤ The information subject should not infringe the personal information and privacy of the information subject himself or another person being processed by the company in violation of related laws such as the Personal Information Protection Act. Article 6 (Items of personal information to be processed ) The company handles the following items of personal information. 1. Required items for membership registration and management on the website : Optional items: 2. Goods or Required items for service provision : Optional items: 3 In the course of using the Internet service, the following personal information items may be automatically generated and collected. Article 7 (destruction of personal information ) such as IP address, cookie, MAC address, service usage record, visit record, and bad use record ① The company delays when personal information becomes unnecessary, such as the elapse of the retention period of personal information and achievement of the purpose of processing Without destroying the personal information. ② In the event that the retention period of personal information agreed to by the data subject has elapsed or the purpose of processing has been achieved, if personal information must be kept in accordance with other laws and regulations, the personal information must be moved to a separate database (DB) or the storage location Differently preserved.
③ The procedure and method of personal information destruction are as follows.
1. Destruction Procedures The
company selects personal information that causes a reason for destruction, and destroys personal information with the approval of the company's personal information protection officer.
2. Destruction method The
company destroys personal information recorded and stored in the form of an electronic file using a method such as Low Level Format so that it cannot reproduce the record, and personal information recorded and stored in paper documents is shredded with a shredder. Or destroy it by incineration.
Article 8 (Measures to ensure the safety
of personal information ) The company takes the following measures to ensure the safety of personal information.
1. Administrative measures: establishment and implementation of internal management plans, regular employee training, etc.
2. Technical measures: management of access rights such as personal information processing systems, installation of access control systems,
encryption of unique identification information , installation of security programs, etc.
3. physical measures : Access control of computer room, data storage room, etc.
Article 9 (Matters on the installation, operation, and rejection of automatic personal information collection devices)
① The company stores and retrieves usage information in order to provide personalized services to users. cookie)'.
② Cookies are a small amount of information sent by the server (http) used to operate the website to the user's computer browser and may be stored on the hard disk of the user's PC computer.
used to provide optimized information to users by grasping visits and usage patterns, popular search terms, and secure access to each service and websites visited by users .
I. Installation, operation and rejection of cookies: You can refuse to save cookies by setting options in Tools>Internet Options>Privacy menu at the top of the web browser.
All. If you refuse to save cookies, you may have difficulty using customized services. Article 10 (Personal Information Protection Officer) ① The company is responsible for the handling of personal information, and has designated the person in charge of personal information protection as follows to handle complaints by the data subject and to remedy damages related to personal information processing. . ▶ Name of the person in charge of protection of personal information : OOO Position: OOO Contact: , , ※ It is connected to the department responsible for personal information protection. ▶ Personal Information Protection Department Department Name: OOO Team Contact Person: OOO Contact: , , ② The information subject inquires about all personal information protection occurred while using the company's service (or business), You can contact the person in charge of personal information protection and the department in charge of handling complaints and remedies. The company will respond and process any inquiries from information subjects without delay.
Article 11 (Request for Reading Personal Information) The
data subject may request the following departments to request access to personal information pursuant to Article 35 of the Personal Information Protection Act. The company will endeavor to promptly process requests for information subject's access to personal information.
▶ privacy browsing claims received treatment department.
Contacts: , ,
Article 12 (rights violations remedy)
data subject is privacy for agencies under You can inquire about damage relief, consultation, etc.
▶ Personal Information Infringement Report Center (operated by Korea Internet & Security Agency) -Management:
Report personal information infringement and apply for consultation
-Phone: (without area code) 118
-Address: (58324) Naju-si, Jeollanam-do 9, Jinheung-gil (301-2, Bitgaram-dong) Personal Information Infringement Reporting Center
▶ Personal Information Dispute Mediation Committee
-Jurisdiction: Personal Information Dispute Mediation Application, Collective Dispute Mediation (civil settlement)
-Homepage: www.kopico.go. kr
-Phone: (without area code) 1833-6972
-Address: ( 03171 ) 4th floor of the Government Seoul Office, 209 Sejong-daero, Jongno-gu, Seoul
▶ Cyber Crime Division of the Supreme Prosecutors' Office: 02-3480-3573 (www.spo.go.kr)
▶ National Police Agency Cyber Safety Bureau: 182 (http://cyberbureau.police.go.kr) Article 13 (Personal Information Processing Policy Enforcement and Change) This personal information processing policy is 20XX. X. Applies from X.