■ Items of personal information collected and collection method
The Company collects the following personal information for the purpose of membership sign-up, provision of consultation, and prevention of abuses as well as other membership services.
*Required items: Name, ID, password, email, address, mobile phone number, telephone number, IP address, and payment records
*Optional information: This is the information that the Company needs to provide customized services.
■ Collection of personal information and purpose of using such information
The Company uses the personal information it collected for the following purposes:
-Fulfillment of contracts for the provision of services, payment related to the provision of services, provision of contents, purchasing and payment, shipping, sending of bills, authentication of identity for a financial transaction, financial services, etc.
-Management of members
Authentication of identity, personal identification, prevention of misuse by abusive users or non-authorized uses, confirmation of intent to sign up, confirmation of age, confirmation of consent from legal guardians if a minor signs up, addressing of complaints for users above 14, and servicing notifications.
-Utilized in marketing and advertising
Providing advertising information such as event information, understanding the frequency of contacts, and obtaining statistics on the use of services by users
■ Period of holding and using personal information
The Company disposes of your personal information as soon as the purpose of collecting and using such personal information is served, in principle. However, the Company will keep the personal information for a certain period of time to manage transactions and confirm rights in accordance with related laws and regulations, such as the Commerce Act, Consumer Protection Act, etc. The following practices shall be followed in the case of an e-commerce transaction:
-Records on contracts or withdrawals of orders: 5 years (Act On The Consumer Protection In Electronic Commerce)
-Records on payments or supply of goods, etc.: 5 years (Act On The Consumer Protection In Electronic Commerce)
-Records in the processing of customer complaints and other disputes: 3 years (Act On The Consumer Protection In Electronic Commerce)
-If personal information is collected for a temporary purpose, such as survey or event: until the end of certain surveys and events
-Records on user authentication: 6 months (Act on the Promotion of Information and Communications Network Utilization and Information Protection)
-Records on visits (Log in): 3 months (Protection of Communications Secrets Act)
■ Process of disposal of personal information and methods thereof
The Company disposes of your personal information as soon as the purpose of collecting and using such personal information is served, in principle. The method of disposal is as follows:
The information entered by the user for using the service is moved to a separate DB once the purpose is served (or, in the case of paper, separate documents), then, based on the internal policies and other reasons for protecting information (see the Period of Storage and Use), prior to its disposal. The personal information that is moved to a separate DB as per the internal policies and other requirements of the laws is not used for any other purposes unless otherwise stipulated by the law.
-Method of disposal
*Any information that is printed on paper will be shredded or incinerated.
*Any personal information in electronic file formats will be deleted utilizing technologies that will prevent any restoration of the information.
■ Provision of the information to a third party
The Company shall use the personal information of users within the boundary of the consent given as per the “Purpose of Collecting and Using Personal Information” by the user. In principle, we do not use the personal information of our users beyond the consent they gave us without their prior consent. We do not disclose personal information to a third party, except for the following cases:
-The users gave prior consent; or,
-The use is based on the provisions of a law or there has been a request from a law enforcement agency in accordance with the relevant laws and procedures.
■ Outsourcing of handling of personal information
If we outsource the handling of personal information for work efficiency, we will inform the users of the persons who are commissioned to handle personal information (hereinafter referred to as "contractor"). Details of the outsourced personal information handling tasks The current contractor hired by us to handle personal information and their scope of work are as follows:
Contractor (Agent): scope of entrusted work (scope of work)
EMS: Shipping of goods; provision of services such as shipping destination and arrival information, etc.
■ Rights of the users or their legal representatives and how to exercise such rights
-The users and their legal representatives can access or make corrections to their personal information registered with us. They can also submit a request for termination of their membership (withdrawal of consent).
-To view and make corrections to the personal information of a user, the user should click "Update Personal Information" (or "Edit Member Information," etc.) and click "Terminate my membership" (withdrawal of consent). The user should then go through the identity authentication process, after which the personal information can be viewed or corrected and the user may submit a termination request for his/her membership. A user or a minor under 14 can click "Terminate my membership" to terminate his/her membership (canceling the membership).
-He/She can also contact the Privacy Officer by mail, email, or telephone, and we will take the necessary actions without delay.
-If a user is making a request to correct errors in his/her personal information, the Company will neither use nor provide such personal information to a third party until such errors are corrected. Moreover, if we have provided incorrect personal information to a third party, we will inform such third party of the result of the processing of correction of said personal information without delay.
-For the personal information that has been deleted, or if a member terminated membership due to a request by the user or his/her legal representative, the Company shall handle the personal information as per the "Period of Storing and Using Personal Information" and take actions to prevent the information from being used for any other purposes.
-Purpose of using cookies, etc.
Analyze the access frequency or duration of visits; understand the interests and preferences of users; ensure traceability; monitor participation in events and trace; provide targeted marketing and personalized services.
You have the option to allow the installation of a cookie. Therefore, you can select the option in your browser to allow all cookies, receive a prompt each time a cookie is about to be saved, or disable all cookies.
-How to refuse the installation of a cookie
You can select the option in your browser to allow all cookies, receive a prompt each time a cookie is about to be saved, or disable all cookies.
-How to change your cookies setting (for Internet Explorer): Go to Tools > Internet Option > Privacy in our browser.
-If you declined the installation of cookies, however, you may experience difficulties when using the services.
■ Privacy Officer and Contact Information
The Company designated a Privacy Office and a responsible department in order to protect the personal information of customers and handle complaints related to personal information.
-You can submit all your personal information-related complaints arising from your use of the service to the Privacy Officer or the responsible department.
-The Company will ensure prompt reply to your reports.
-If you have any questions on personal information, or if you would like to report an abuse of your personal information, please contact the following agencies:
*Personal Information Dispute Mediation Committee (www.1336.or.kr / 1336)
*Information Protection Mark Certification Committee (www.eprivacy.or.kr / 02-580-0533~4)
*Cyber Crime Investigation Center of the Supreme Prosecutor’s Office (http://icic.sppo.go.kr / 02-3480-3600)
*Cyber Crime Investigation Unit of the National Police Agency (www.ctrc.go.kr / 02-392-0330)
■Duty of Notification
This policy takes effect from Feb. 19, 2013.