Dongu - Privacy Policy
# Privacy Policy
The company (hereinafter referred to as 'Daldal Town'), in accordance with Article 30 of the Personal Information Protection Act, establishes and discloses the following personal information processing policy to protect the personal information of information subjects and to promptly and smoothly handle grievances related thereto.
### Article 1 (Purpose of Processing Personal Information)
Daldal Town processes personal information for the following purposes. The personal information processed will not be used for any purpose other than the following purposes, and if the purpose of use is changed, we will take necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
1. Membership and Management of the “Dongu” service
Personal information is processed for the purpose of confirming the intention to join the membership, identifying and authenticating the person in accordance with the provision of membership services, maintaining and managing membership, preventing unauthorized use of services, confirming the consent of the legal representative when processing personal information of children under the age of 14, various notices and notifications, and handling grievances.
2. Handling Civil Affairs
We process personal information for the purpose of identifying the complainant, verifying the complaint, contacting and notifying the complainant for fact-finding, and notifying the result of the processing.
3. Provision of Goods or Services
We process personal information for the purpose of providing services, sending contracts and invoices, providing content, providing customized services, identification, age verification, payment and settlement of fees, and collecting debts.
4. Utilization for Marketing and Advertising
Personal information is processed for the purpose of developing new services (and products) and providing customized services, providing event and advertising information and participation opportunities, providing services and displaying advertisements according to demographic characteristics, verifying the validity of services, identifying access frequency, or statistics on members' use of services.
5. Personal Video Information
We process personal information for the purpose of preventing and investigating crimes.
### Article 2 (Processing and Retention Period of Personal Information)
① Daldal Town shall process and retain personal information within the period of retention and use of personal information in accordance with laws and regulations or the period of retention and use of personal information agreed upon when collecting personal information from the information subject.
② The processing and retention period of personal information is as follows.
1. Homepage Registration and Management
Personal information related to <Homepage Membership and Management> shall be destroyed without delay upon withdrawal of membership, and shall be retained and used for the above purposes.
1. Management of Unauthorized Use Records
In order to prevent unauthorized use of the service, such as interfering with the user's use of the service, the relevant personal information is retained and used for the above purposes for up to 5 years from the date of consent to collect and use.
1. Handling Civil Affairs
Personal information related to the handling of civil affairs shall be retained and used for the above purposes for up to 3 years from the date of consent to collection and use.
Related laws: Records of consumer complaints or dispute handling: 3 years
1. Provision of Goods or Services
Personal information related to the provision of goods or services shall be retained and used for the above purposes for up to 5 years from the date of consent to collection and use.
Related laws: Records on payment and supply of goods: 5 years
1. Utilization for Marketing and Advertising
Personal information related to the use of marketing and advertising will be retained and used for the above purposes for up to 6 months from the date of consent to collection and use.
Related laws: Records on display/advertising: 6 months
### Article 3 (Items of Personal Information Processed)
① Daldal Town processes the following personal information items.
1. Homepage Registration and Management
Required items: mobile phone number, gender, date of birth, service use record, access log, access IP information, terminal information.
Optional items: email, legal representative name, legal representative contact phone number, legal representative address, legal representative mobile phone number.
### Article 4 (Procedure and Method of Destruction of Personal Information)
① Daldal Town destroys personal information without delay when it becomes unnecessary, such as the expiration of the personal information retention period or the achievement of the purpose of processing.
② If the personal information retention period agreed to by the information subject has elapsed or the purpose of processing has been achieved, but the personal information must continue to be preserved in accordance with other laws and regulations, the personal information shall be transferred to a separate database (DB) or preserved in a different storage location.
③ The procedures and methods for destroying personal information are as follows.
1. Destruction Procedure
Daldal Town selects the personal information for which the reason for destruction is required, and destroys the personal information with the approval of the personal information protection officer of Daldal Town.
1. Destruction Method
Information in the form of electronic files are destroyed using technical methods that do not allow the records to be reproduced.
Personal information printed on paper shall be destroyed by shredding or incineration.
### Article 5 (Measures for Destroying Personal Information of Unused Users)
① Daldal Town destroys the information of users who have not used the service for one year. However, it may be stored and managed separately from other users' personal information until the retention period prescribed by other laws and regulations has elapsed.
② At least 30 days prior to the destruction of personal information, Daldal Town will notify the user of the fact that the personal information will be destroyed, the expiration date of the period, and the items of personal information to be destroyed. Information to be destroyed will be notified to the user through either email or text.
③ If you do not want your personal information to be destroyed, you can log in to the service before the period expires.
### Article 6 (Rights and Obligations of the Information Subject and Legal Representative and How to Exercise them)
① The information subject may exercise the right to view, correct, delete, or request suspension of processing of personal information at any time against Daldal Town.
② The exercise of the rights under Paragraph (1) may be made in writing, e-mail, facsimile transmission (Fax), etc. to Daldal Town in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and Daldal Town will take action without delay.
③ The exercise of the rights under Paragraph 1 may be made through an agent such as the legal representative of the information subject or a person who has been delegated. In this case, a power of attorney in accordance with Attachment No. 11 to the "Notification on Personal Information Processing Method (No. 2020-7)" must be submitted.
④ Requests for access to personal information and suspension of processing may limit the rights of the information subject under Article 35, Paragraph 4, and Article 37, Paragraph 2 of the Personal Information Protection Act.
⑤ A request for correction and deletion of personal information cannot be made if the personal information is specified as the subject of collection in other laws.
⑥ Daldal Town shall verify whether the person who made the request for access, correction, deletion, or suspension of processing in accordance with the rights of the information subject is the person or a legitimate representative.
### Article 7 (Measures to Ensure the Safety of Personal Information)
Daldal Town takes the following measures to ensure the safety of personal information.
1. Conducting Regular Self-Audits
We conduct self-audits on a regular basis (once a quarter) to ensure stability in the handling of personal information.
1. Minimization and training of employees handling personal information
We implement measures to manage personal information by designating and minimizing the number of employees who handle personal information.
1. Establishment and Implementation of Internal Management Plan
We establish and implement an internal management plan for the safe handling of personal information.
1. Technical Measures Against Hacking, etc.
In order to prevent the leakage and damage of personal information due to hacking or computer viruses, Daldal Town installs security programs that periodically updates and inspects systems, installs systems in areas with controlled access from the outside, and monitors and blocks them technically and physically.
1. Encryption of Personal Information
The user's personal information is stored and managed by encrypting the password, so only the user can know it, and for important data, separate security functions are used, such as encrypting file and transmission data or using the file lock function.
1. Retention of Access Records and Prevention of Falsification
We keep and manage records of access to the personal information processing system for at least one year, but if we add personal information about 50,000 or more information subjects or process uniquely identifiable or sensitive information, we keep and manage it for at least two years.
In addition, we use security features to prevent access records from being falsified, stolen, or lost.
1. Restriction of Access to Personal Information
We take necessary measures to control access to personal information by granting, changing, and expunging access rights to the database system that processes personal information, and we control unauthorized access from the outside using an intrusion prevention system.
1. Use of Locks for Document Security
Documents containing personal information, auxiliary storage media, etc. are stored in a safe place with a lock.
1. Access Control for Unauthorized Persons
We have a separate physical storage location for personal information and establish and operate access control procedures for it.
### Article 8 (Installation, Operation, and Rejection of Devices that Automatically Collect Personal Information)
Daldal Town does not use 'cookies' that store and retrieve the usage information of the information subject from time to time.
### Article 9 (Provision of Personal Information to Third Parties and Entrustment of Processing)
Daldal Town partially consigns the processing of personal information when necessary for the smooth provision of services, and manages and supervises the entrusted company to comply with relevant laws and regulations.
Consignment details: Mobile phone number for sending text messages
Period of retention and use of personal information: Until withdrawal of membership or termination of consignment contract
Entrusted company: Amazon Web Services, Inc.
Consignment details: Information storage
Period of retention and use of personal information: Until withdrawal of membership or termination of consignment contract
Consignee: Amazon Web Services, Inc.
Consignment : Information storage
Period of retention and use of personal information: Until withdrawal of membership or termination of consignment contract
Trustee: Google LLC
### Article 10 (Personal Information Protection Officer)
① Daldal Town is responsible for the processing of personal information in general, and designates a personal information protection officer as follows to handle complaints and damage relief of information subjects related to the processing of personal information.
Personal Information Protection Officer
- Name: Minsoo Jung
- Position: CEO
- Contact: privacy@daldaltown.com
② Users may contact the person in charge of personal information protection for all personal information protection-related inquiries, complaints, and damage relief arising from the use of Daldal Town's services (or business). Daldal Town will respond to and process inquiries from information subjects without delay.
### Article 11 (Department to Receive and Process Requests for Access to Personal Information)
Users may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the following departments.
Daldal Town will endeavor to promptly process the user’s request for access to personal information.
### Article 12 (Remedies for Infringement of the Rights and Interests of the Information Subject)
The information subject (user) may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, Korea Internet & Security Agency's Personal Information Infringement Reporting Center, etc. in order to receive relief due to personal information infringement. In addition, please contact the following organizations for other personal information infringement reports and consultations.
1. Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Reporting Center: (without area code) 118 (privacy.kisa.or.kr)
3. Supreme Public Prosecutors' Office: 1301 (without area code) (www.spo.go.kr)
4. National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)
A person whose rights or interests have been infringed by a disposition or omission made by the Head of a Public Institution in response to a request pursuant to the provisions of Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), or Article 37 (Suspension of Personal Information Processing, etc.) of the Personal Information Protection Act may file an administrative appeal as provided in the Administrative Appeals Act.
※ For more information on administrative appeals, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).
Notice Date: December 1, 2022
Effective Date: December 1, 2022