Privacy Policy of Jeju Content Agency
Jeju Content Agency (hereinafter referred to as the "Agency") establishes and discloses this privacy policy in accordance with Article 30 of the Personal Information Protection Act to protect the personal information of data subjects and to promptly and smoothly handle any related grievances.
Article 1 (Purpose of Processing Personal Information)
The Agency processes personal information for the following purposes. The personal information collected is not used for purposes other than those specified below. If the purpose of use is changed, the Agency will take necessary measures, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
Membership Registration and Management
- Confirmation of membership intention, personal identification and authentication for membership services, maintenance and management of membership status, identity verification for limited identity confirmation systems, prevention of fraudulent service use, verification of legal guardians' consent when processing personal information of children under 14, various notifications and announcements, and handling of grievances.
Provision of Goods or Services
- Delivery of goods, provision of services, issuance of contracts and invoices, content provision, customized services, identity verification, age verification, payment and settlement, and debt collection.
Handling Grievances
- Identity verification of complainants, confirmation of complaints, communication and notification for factual investigations, and notification of results.
Article 2 (Processing and Retention Period of Personal Information)
The Agency processes and retains personal information within the period agreed upon by the data subject when collecting the personal information or as required by applicable laws.
The specific retention and processing periods for each category of personal information are as follows:
Membership Registration and Management: Until the member withdraws from the website. However, if any of the following apply, the data will be retained until the relevant period ends:
- If an investigation is ongoing due to a violation of related laws, the information will be retained until the investigation is concluded.
- If there are outstanding financial obligations due to website use, the information will be retained until settlement is completed.
Provision of Goods or Services: Until the supply of goods/services is completed and payment is fully settled. However, information will be retained for the following periods under applicable laws:
- Records related to transactions (such as advertisements, contract details, and execution) under the Act on Consumer Protection in Electronic Commerce:
- Advertisement records: 6 months
- Records of contracts, cancellations, payments, and supply of goods: 5 years
- Consumer complaints and dispute resolution records: 3 years
- Communication records under the Protection of Communications Secrets Act:
- Telecommunications log records: 1 year
- Internet log records and access tracking data: 3 months
Article 3 (Provision of Personal Information to Third Parties)
The Agency processes personal information only within the scope outlined in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only when consent is obtained from the data subject or when permitted by applicable laws.
Article 4 (Rights of Data Subjects and How to Exercise Them)
Data subjects have the following rights regarding the protection of their personal information:
- Request access to personal information
- Request corrections for errors
- Request deletion of personal information
- Request suspension of processing
These rights may be exercised in writing, by phone, email, or fax, and the Agency will take action without delay.
If a correction or deletion is requested due to errors in personal information, the Agency will not use or provide the relevant information until the correction or deletion is completed.
These rights may be exercised by a legal representative or an authorized agent with a designated power of attorney (as per the Enforcement Rule of the Personal Information Protection Act).
Data subjects must not infringe on the privacy or personal information of others in violation of the Personal Information Protection Act or other related laws.
Article 5 (Items of Personal Information Processed)
Membership Registration and Management:
- Required information: Name, date of birth, ID, password, address, phone number, gender, email address, i-PIN number.
- Optional information: Marital status, areas of interest.
Provision of Goods or Services:
- Required information: Name, date of birth, ID, password, address, phone number, email address, i-PIN number, credit card number, bank account information.
- Optional information: Areas of interest, past purchase history.
Information automatically collected during internet service use:
- IP address, cookies, MAC address, service usage records, visit records, and records of inappropriate usage.
Article 6 (Destruction of Personal Information)
The Agency destroys personal information without delay once the retention period expires or when the purpose of processing is achieved.
If personal information must be retained beyond the agreed retention period due to legal requirements, it will be stored in a separate database or storage location.
Destruction Process and Methods:
- The Agency selects personal information subject to destruction and destroys it after obtaining approval from the Data Protection Officer.
- Electronic files are permanently deleted using technical methods, and paper documents are shredded or incinerated.
Article 7 (Measures to Ensure the Security of Personal Information)
The Agency takes the following security measures to protect personal information:
- Administrative Measures: Establishment of internal management plans and regular employee training.
- Technical Measures: Access control, encryption of unique identifiers, installation of security programs.
- Physical Measures: Access control for data storage facilities.
Article 8 (Use of Cookies and Refusal Options)
- The Agency uses cookies to provide customized services to users.
- Users can refuse cookie storage by adjusting their web browser settings. However, this may cause difficulties in using customized services.
Article 9 (Data Protection Officer)
Article 10 (Request for Personal Information Access)
Data subjects may request access to their personal information through the Content Distribution Team, which will handle requests promptly.
Article 12 (Remedies for Rights Violations)
Data subjects may contact the following organizations for assistance in cases of personal information infringement:
Personal Information Infringement Report Center (KISA)
Personal Information Dispute Mediation Committee
Supreme Prosecutors' Office Cybercrime Investigation Unit
National Police Agency Cyber Bureau
Article 13 (Changes to the Privacy Policy)
This privacy policy is effective as of February 27, 2025.