Personal Information Processing Policy

 

The Human Plus Co., Ltd. (hereinafter referred to as the "Company"), in accordance with Article 30 of the Personal Information Protection Act, shall protect the personal information of the subject of information and be able to promptly and smoothly deal with the complaints related thereto. Established and published.

 

Article 1 (Purpose of personal information processing)

The company processes personal information for the following purposes. The personal information being processed will not be used for any purpose other than the following, and if the purpose of use is changed, we will implement necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

 

1. Homepage (app) membership registration and management

Personal authentication, personal identification, age-limited service provision, personal doctor verification, registration confirmation, re-registration limit, inquiry and dispute adjustment record, membership withdrawal confirmation, notification delivery, failure to use users

2. Provision of goods or services

Cryptocurrency e-wallet, transmission and transaction service

3. Development of new services and use in marketing and advertising

Statistics on new service development, provision of customized services, provision of services according to statistical characteristics, publication of advertisements, validation of services, event and advertisement information and participation opportunities, identification of access frequency, access to members' services

4. Grievance handling

We process personal information for the purpose of verifying the identity of the complainant, confirming the complaint, contacting us for fact investigation, notification of processing results, etc.

5. Investigation request related

Provides legitimate and legitimate investigation requests in response to crimes such as hacking/fraud, investigation into accidents related to illegal acts, and fulfillment of obligations under other laws, etc.

 

 

Article 2 (Processing and retention period of personal information)

When collecting personal information of a member, the company must notify the member of the information in advance beforehand and collect it with consent. The company complies with the following items to collect personal information of members.

 

1. The Company retains personal information in accordance with laws and regulations ∙ Retains personal information agreed upon when collecting personal information from the period of use or information subject ∙ Processes and retains personal information within the period of use.

2. Each personal information processing and retention period is as follows.

① Personal information items and purposes for use in membership subscription and cryptocurrency electronic wallets and transmission and transaction records

 

division

Collection and use items

purpose of use

Required items

Linked information (CI), duplicate subscription confirmation information (DI), name of recipient, date of birth, cell phone number, terminal model name, market classification, smartphone OS information, user's adult, financial institution name, account number, deposit name

1) Verification, occupancy authentication for service provision,

2) Service service users to use this service on the affiliates and service homepage       

3) Blocking and approval of personal authentication

Date of service subscription/termination, history of service execution, service usage information (access medium, transmission and transaction record, etc.), e-wallet address, type of cryptocurrency, balance

Service use and user management (identity identification for service use, personal identification, prevention of unauthorized use and prevention of unauthorized use, prevention of subscription use, confirmation of subscription intention, record preservation for dispute adjustment, handling of complaints, delivery of complaints, service delivery, etc. Maintenance method Notifications, etc.)

Optional

Mobile phone number, consent path/date

Used for marketing advertising 1) Personalized consultation and information on development and improvement of "service" and inquiries related to "service". 2) Send personalized advertisements and information related to new services or events, third-party products or "services"

 

② Preservation by law according to provision of goods or services

Grounds Actx

Preservation information

Retention period

Law on Consumer Protection in Electronic Commerce, etc.

Records regarding contracts or withdrawal of subscription

5 years

Laws on consumer protection in e-commerce transactions, commercial law, Basic National Tax Act, Income Tax Act, Corporate Tax Act, and VAT Act

Records related to the supply of payment and goods, books, and supporting documents related to transactions

5 years

Law on Consumer Protection in Electronic Commerce

Records of consumer complaints or dispute resolution

3 years

Law on Consumer Protection in Electronic Commerce

Records on display/advertising

6 months

However, if an investigation, etc., in accordance with the violation of related laws and regulations is in progress, will be retained and used until the investigation ends.

 

 

Article 3 ( Matters concerning the provision of personal information to third parties)

The company processes the personal information of the data subject only within the scope specified in Article 1 (Purpose of Processing Personal Information), Article 17 of the Personal Information Protection Act, including the transaction between seller and buyer, consent of the data subject, and special provisions of the law. Personal information will be provided to third parties only if it falls under Article 18.

 

① Merchandise and service seller (merchant)

Who is provided with personal information: Seller of product and service (merchant)

Purpose of providing personal information: Transaction between seller and buyer

Personal information items provided: payment method, payment amount (including discount and shuffle reward amount), payment date

Period of retention and use of personal information: Until the withdrawal from shuffle or during the storage obligation period in accordance with relevant laws

 

 

Article 4 ( Matters concerning entrustment of personal information processing)

1. The company entrusts the following personal information processing tasks for smooth personal information processing.

① Danal Corporation

Purpose of provision: Identity authentication service

Retention period:  At the time prescribed by law, until membership withdrawal or consignment termination

② Amazon Web Service, Inc

Purpose of provision: Data security services

Retention period: The time set by the law, until membership withdrawal or termination of consignment contract

③ LG U Plus Co., Ltd.

Purpose of provision: Text sending service

Retention period:  At the time of membership withdrawal or until the termination of the entrustment contract,

 

2. When signing a consignment contract, the company shall provide information on the responsibilities such as prohibiting the processing of personal information in accordance with Article 25 of the Personal Information Protection Act, prohibition of personal information processing, technical and administrative protection measures, restrictions on re-trust, management, supervision of the trustee, and compensation for damages. It is specified in documents such as contracts and supervises whether the trustee handles personal information safely.

3. If the contents of the consignment service or the trustee are changed, we will disclose it through this personal information processing policy without delay.

 

 

Article 5 (Information subject and legal representative's rights, obligations, and matters related to the method of execution)

1. The information subject can exercise the rights related to the protection of personal information as follows at any time to the company.

① Request for personal information

② If there is an error, etc.

③ Deleted

④ Stop processing requests

 

2. The exercise of rights pursuant to Paragraph 1 may be made to the Company in writing, by e-mail or by fax (FAX) in accordance with the Form 8 of the Enforcement Rules of the Personal Information Protection Act, and the Company will take action without delay.

3. If the information subject requests correction or deletion of personal information errors, the company will not use or provide the personal information until the correction or deletion is completed.

4. The exercise of rights pursuant to Paragraph 1 may be done through a legal representative of the data subject or an agent such as a person who has been delegated. In this case, you must submit a power of attorney in accordance with Appendix 11 of the Enforcement Rules of the Personal Information Protection Act.

 

 

 

Article 6 (Items of personal information to be processed)

The company handles the following personal information items.

1. Required items: Login ID (email address or mobile phone number, password), nationality

2. Optional items: None

3. Items by type of personal information collection

4. In the course of using the service, the following personal information items may be automatically generated and collected. (IP address, cookie, MAC address, service use record, visit record, bad use record, etc.)

 

division

When to collect

Collected items

Sign Up

Level 1 certification

Email, password

Level 2 Certification

Mobile phone number, Security PiIN number

Level 3 Certification

Name, mobile phone number, date of birth, internal/foreigner information, gender, CI (identity identification information), DI (duplicate subscription confirmation information), nationality, copy of passport, passport, and photo taken with face

Additional authentication

Reset password

mail address or phone number

Cell Phone Number Initialization

Copy of ID card (unique identification information mask), ID card (unique identification information mask) and photo, video, email taken with face

Freeze your account in a non-login state

Mobile phone number, email, copy of ID card

Cancel account freeze (login and withdrawal restrictions)

Mobile phone number, email, copy of ID card

Rename

Original copy of resident registration (unique identification information masking), call recording for personal identification

secession

Application for withdrawal of membership

No collection items

Membership withdrawal status Member application

Name, contact information, email, balance agreement, copy of ID card (unique identification information masking), ID card (unique identification information masking) and photo, video taken with face

Inquiries

identification

Name, contact information, email, date of birth, copy of ID card (unique identification information masking), ID card (unique identification information masking) and photo, video taken with face

Video recording after member consent

Recorded contents

 

Article 7 (Regarding the destruction of personal information)

1. The company destroys personal information without delay when personal information becomes unnecessary, such as the elapse of the retention period of personal information and achievement of the purpose of processing.

2. In the event that the retention period of personal information received from the data subject has elapsed or the purpose of processing has been achieved, if the personal information must be kept in accordance with other laws and regulations, the personal information is transferred to a separate database (DB) or stored. To preserve it differently.

4. The procedure and method of personal information destruction are as follows.

① Personal information destruction procedure

The company selects the personal information that caused the reason for destruction, and destroys the personal information with the approval of the company's personal information protection officer.

② How to destroy personal information

The company destroys personal information stored in electronic file format so that it cannot be reproduced, and personal information recorded in paper documents is shredded or destroyed by a shredder.

 

 

Article 8 (Personal Information Protection Officer)

The company is responsible for the handling of personal information, and has designated the person in charge of protection of personal information as follows to handle complaints and remedy of information subjects related to personal information processing.

Personal Information Protection Officer: (Personal) Information Security Department Officer

Contact: 02-3447-2111

Email: information@hupayx.com

 

Article 9 (Remedy for infringement of rights and interests)

You can inquire about the following organizations for remedies, counseling, etc. for infringement of personal information.

 

Agency in charge

task

homepage

Personal Information Infringement Report Center (KISA operated)

Personal Information Infringement Report Application

118

privacy.kisa.or.kr

Personal Information Dispute Mediation Committee

Personal information dispute mediation application, group dispute mediation (civil settlement)

1833-6972

kopico.go.kr

Supreme Prosecutors' Office

-

02-3480-3573

spo.kr

National Police Agency

-

182

cyberbureau.police.go.kr

 

Article 10 (Regarding the installation, operation, and refusal of the automatic collection of personal information device)

1. In order to provide personalized service to members, the company uses'Cookie', which stores and retrieves usage information from time to time.

2. Cookies are a small amount of information sent by the server (http) used to operate the website to the user's computer browser and may be stored on the hard disk of the user's PC computer.

① Purpose of use of cookies: It is used to provide optimized information to members by grasping visits, usage patterns, search terms, and secure access to the pages visited by the members.

② Installation, Operation, and Rejection of Cookies: Members have the option to install cookies, and can refuse or delete these cookies at any time.

③ How to refuse cookie setting

1) Internet Explorer: Set at Tools> Internet Options> Personal Information at the top of the web browser

2) Chrome: Settings in Settings> Advanced Settings> Privacy & Security> Content Settings

④ If you refuse to save cookies, it may be difficult to use the customized service.

 

Supplementary provisions

This privacy policy applies from March 9, 2020.