IDRO Co., Ltd. (hereinafter referred to as the ‘Company’) has the following personal information processing policy to protect personal information in accordance with the Personal Information Protection Act and to promptly and smoothly handle complaints related thereto. Establish and disclose.
1. Purpose of processing personal information
① The company processes personal information for the following purposes, and the personal information being processed is not used for purposes other than the following purposes.
② If the purpose of use changes, we will take necessary measures, such as obtaining separate consent, in accordance with the Personal Information Protection Act.
1) Product and service inquiries
Personal information is processed for the purposes of filling out product inquiry forms through the website, confirming inquiries about product and service use, contacting for fact-finding, notification, and notification of processing results.
* Personal information is not processed in the applications or mobile apps used when using the product.
2. Personal information items processed
The company handles the following personal information items.
1) Product and service inquiries: name, company name, email
* Items that can be automatically generated and collected during the use of Internet services: service use records, visit records, cookies, access IP
3. Processing and retention period of personal information
① The company processes personal information within the scope specified for the purpose of retention and use, and applies the retention period stipulated by the Personal Information Protection Act and related laws.
② The company immediately destroys personal information when the purpose of using personal information is achieved. However, if any of the following reasons apply, personal information will be kept until the end of the relevant period.
『Act on Consumer Protection in Electronic Commerce, etc.』
– Records of display/advertisement: 6 months
– Records of contracts or subscription withdrawals, etc.: 5 years
– Records of payment and supply of goods, etc.: 5 years
– Records on consumer complaints or dispute handling: 3 years
『Act on Use and Protection of Credit Information』
– Records on credit information processing, etc.: 3 years
『Communication Secret Protection Act』
– Internet log record data, access point tracking data: 3 months
4. Rights and methods of exercise of information subjects and legal representatives
① The information subject may exercise the following rights related to personal information protection at any time.
1) Request to view personal information
2) Request for correction if there is an error, etc.
3) Request for deletion
4) Request to stop processing
② The exercise of rights under Paragraph 1 can be done through e-mail, facsimile (FAX), etc. according to the form in Appendix 8 of the Enforcement Rules of the Personal Information Protection Act, and action will be taken without delay.
③ If the information subject requests correction or deletion of errors in personal information, the personal information will not be used or provided until correction or deletion is completed.
④ The exercise of rights pursuant to Paragraph 1 can be done through an agent, such as a legal representative of the information subject or a person who has been delegated. In this case, you must submit a power of attorney in accordance with Attachment No. 11 of the Enforcement Rules of the Personal Information Protection Act.
5. Personal information destruction procedures and methods
① When personal information becomes unnecessary, such as when the personal information retention period has passed or the purpose of processing has been achieved, the company destroys the relevant personal information without delay.
② If personal information must continue to be preserved pursuant to other laws and regulations despite the expiration of the personal information retention period or the purpose of processing has been achieved, the personal information will be stored in a separate storage location.
③ The company destroys personal information recorded/saved in the form of electronic files so that the records cannot be reproduced, and personal information recorded/saved in paper documents is destroyed by shredding or incineration.
6. Matters regarding measures to ensure the safety of personal information
The company takes the following measures to ensure the safety of personal information.
1) Management measures: establishment and implementation of internal management plan, regular employee training, etc.
2) Technical measures: access authority management, security program installation
3) Physical measures: Access control to computer rooms, data storage rooms, etc.
7. Matters pertaining to the person in charge of personal information protection
The company appoints a personal information protection officer as follows to oversee personal information processing and handle complaints (inquiries, complaints, etc.) from information subjects related to personal information.
<Personal Information Protection Manager>
– Name: Lee Sang-mok
– Contact: +82-44-866-9560
<Personal Information Protection Manager>
– Name: Oh Gwang-jin
– Contact: +82-44-866-9560
8. Remedy for violation of rights and interests of information subject
Information subjects may contact the following organizations to report personal information infringement, seek relief for damage, or receive consultation.
1) Personal Information Infringement Reporting Center: (without area code) 118 (privacy.kisa.or.kr)
2) Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
3) Supreme Prosecutors' Office: (without area code) 1301 (www.spo.go.kr)
4) National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)
9. Matters regarding changes to personal information processing policy
This personal information processing policy is effective from the effective date, and may be changed by revisions to relevant laws or internal company policies, so please check it frequently when using the site.
Effective date: 2023.12.26.
