1. Purpose of Processing Personal Information
The Company processes personal information for the following purposes and does not use it for any purpose other than those listed below.
- Confirming customer intent to register, identifying and authenticating customers for service provision, maintaining and managing membership status, settling payments for the supply of goods or services, and supplying or delivering goods or services, etc.
2. Processing and Retention Period of Personal Information
① The Company processes and retains personal information within the retention and use period consented to by the data subject at the time of collection, or within the retention and use period prescribed by applicable laws and regulations.
② Specific processing and retention periods for personal information are as follows:
- Customer registration and management: Until termination of the service agreement or cancellation of membership; provided, however, that if any claims or obligations remain, until the settlement of such claims or obligations
- Records on contracts, withdrawal of subscription, payment, and supply of goods in e-commerce: 5 years
3. Provision of Personal Information to Third Parties
The Company does not provide personal information to third parties except in cases falling under Article 17 of the Personal Information Protection Act, such as where separate consent is obtained from the data subject or where special provisions exist in laws.
4. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them
Data subjects may exercise the following personal information protection rights against the Company at any time:
- Request to access personal information
- Request for correction in case of errors
- Request for deletion
- Request to suspend processing
5. Items of Personal Information Processed
The Company processes the following items of personal information:
- Name, date of birth, address, telephone number, mobile phone number, gender, email address, and payment information such as credit card numbers and bank account numbers
6. Destruction of Personal Information
① When personal information becomes unnecessary, such as upon the expiration of the retention period or the achievement of the processing purpose, the Company destroys the relevant personal information without delay.
② The Company destroys personal information using the following methods:
- Electronic files: Deletion of files and formatting of storage media such as disks
- Paper documents: Shredding or incineration
7. Measures to Ensure the Safety of Personal Information
The Company takes the following measures to ensure the safety of personal information:
- Administrative measures: Establishment and implementation of an internal management plan, regular training for employees and staff
- Technical measures: Management of access rights such as setting passwords for personal information processing systems (or computers storing personal information), installation of security programs such as antivirus software, and encryption of files storing personal information
- Physical measures: Locking and access control of places where personal information is stored and kept
8. Installation, Operation, and Rejection of Automatic Personal Information Collection Devices
① The Company uses “cookies,” which store and frequently retrieve usage information to provide individualized and customized services to users.
② Cookies are small pieces of information sent by the server (HTTP) used to operate the website to the user’s computer browser and may also be stored on the hard disk of the user’s PC.
- a. Purpose of using cookies: Used to provide optimized information to users by identifying visit and usage patterns, popular search terms, and secure connection status across the services and websites visited by the user.
- b. Installation, operation, and rejection of cookies: You can refuse to store cookies through the option settings in the Tools > Internet Options > Privacy menu at the top of your web browser.
- c. If you refuse to store cookies, you may experience difficulties in using customized services.
9. Chief Privacy Officer
The Company has designated a Chief Privacy Officer as follows to take overall responsibility for personal information processing and to handle complaints and relief for damages of data subjects related to personal information processing.
▶ Chief Privacy Officer (Business Owner or Representative)
| Name | Byun Yushin |
|---|---|
| Title | CEO |
| Contact | +82-2-6925-1279 |
| yushin@qualisoft.co.kr |
10. Changes to the Privacy Policy
This Privacy Policy is effective from January 23, 2019.
