Privacy Policy

In accordance with Article 30 of the “Privacy Protection Act”, e-future Co., Ltd. (hereinafter referred to as the “Company”) establishes and discloses the privacy policy in order to protect the personal information of users and handle related difficulties promptly and smoothly.

 

Article 1 (Purpose of the Privacy Policy)

The “Company” collects personal information for the following reasons. The personal information collected will not be used for other purposes other than the following, and if there is a change in the purpose of use, necessary measures such as obtaining separate consent in accordance with Article 18 of the 「Personal Information Protection Act」 will be implemented.

 

1. Website Member Registration and Management

We collect personal information for the purpose of confirming the intention for member registration, identification and verification of identity according to membership service provision, maintenance and management of membership, prevention of illegal use of services, confirmation of consent of legal representative when handling the personal information of children under the age of 14, various notices, and handling of grievances.

 

2. Handle Complaints

We collect personal information for the purpose of verifying the identity of the complainant, confirming complaints, contacting and notifying for a fact investigation, notifying the results, and record keeping for dispute settlement.

 

3. Provision of Goods or Services

We collect personal information for the purposes of service provision, content provision, personalized service provision, identity verification, age verification, service usage history confirmation, and service-related information.

 

4. Use in Marketing and Advertising

We collect personal information for the purposes of development of new services (products) and provision of customized services, provision of event and advertising information and participation opportunities, provision of services and advertisements according to demographic characteristics, verification of service validity, identification of access frequency, or statistics on member service use, etc.

 

Article 2 (Period of Retention and Use of Personal Information)

As a member, the “Company” retains members’ personal information while using the services provided by the website of the “Company” and uses it to provide services. However, if the member himself/herself deletes or modifies information or requests an account deactivation according to the procedures and methods described in the member’s personal information management (view, correction, deletion, etc.), it will be completely deleted by a method that cannot be reproduced, and it will be processed in a state that cannot be viewed or used later. However, if it is necessary to maintain information in accordance with the provisions of related laws, such as the “Consumer Protection Act”, it is retained for a certain period of time as follows.

 

- Record on consumer complaint or dispute treatment: 3 years

 

Article 3 (Personal Information Items Collected)

The “Company” manages the following personal information items.

 

1. Member Registration and Management

* Required items: ID, Password, email address, country of origin

* Optional items: N/A

 

2. Provision of Goods or Services : N/A

 

3. Unique Identification Information: N/A

 

4. Biometric information: N/A

 

Article 4 (Procedure and Method of Personal Information Destruction)

① The “Company” destroys personal information without delay when personal information becomes unnecessary, such as when the personal information retention period has passed or the purpose of collection has been achieved.

 

② In the event that the personal information retention period agreed upon by the information subject has passed or the personal information needs to be kept according to other laws despite the achievement of the purpose of collection, the personal information is transferred to a separate database (DB) and stored.

 

Article 5 (Rights and Obligations of Information Subjects and Legal representatives and how to Exercise Them)

① The information subjects can exercise the right to view, correct, delete, and suspend the collection of personal information at any time with respect to the “Company”.

※ Requests for access to personal information regarding children under the age of 14 must be made by the legal representative directly, and the information subject who is a minor over the age of 14 may exercise his or her rights with respect to the personal information of the information subject or through a legal representative.

 

② The exercise of the rights pursuant to Paragraph 1 may be done in writing, email, fax, etc. in accordance with Article 41(1) of the Enforcement Decree of the “Personal Information Protection Act” for the “Company”, and the “Company” will not delay in taking actions.

 

③ The rights of the information subject may be restricted in accordance with Article 35(4) and Article 37(2) of the “Personal Information Protection Act” for requests to view and suspend the collection of personal information.

 

④ Request for correction and deletion of personal information cannot be made if the personal information is specified as a collection subject in other laws.

 

⑤ The “Company” confirms whether the person who made the request, such as a request for view, correction, deletion, or request for suspension of collection, is the person or a legitimate legal representative according to the rights of the information subject.

 

Article 6 (Measures to Ensure the Safety of Personal Information)

The “Company” is taking the following measures to ensure the safety of personal information.

① Regular Self-Audit

To ensure the stability of handling personal information, we conduct regular (quarterly) self-audits.

 

② Minimization and Training of Personnel Handling Personal Information

We are implementing measures to manage personal information by designating employees who handle personal information and limiting them to the person in charge.

 

③ Establishment and Implementation of Internal Management Plan

We have established and implemented an internal management plan for the safe handling of personal information.

 

④ Technical Measures Against Hacking

The “Company” installs security programs to prevent leakage and damage of personal information caused by hacking or computer viruses, periodically updates and inspects, installs systems in areas where access is controlled from outside, monitors technically and physically, and blocks relevantly.

 

⑤ Encryption of Personal Information

The user's personal information is stored and managed with an encrypted password, so only the user can know it. For important data, a separate security function is used, such as encrypting files and transmission data or using a file lock function.

 

⑥ Storage of Access Records and Prevention of Forgery

Records of access to the personal information processing system are kept and managed for at least one year, however, if personal information is added or unique identifying information or sensitive information is processed for more than 50,000 information subjects, it is kept and managed for more than two years. In addition, a security function is used to prevent forgery, theft, or loss of access records.

 

⑦ Restriction on Access to Personal Information

We take necessary measures to control access to personal information by granting, changing, and canceling access rights to the database system that processes personal information, and use an intrusion prevention system to control unauthorized access from outside.

 

⑧ Use of Locking Device for Document Security

Documents and auxiliary storage media containing personal information are stored in a safe place with a lock.

 

⑨ Access Control for Unauthorized Persons

A separate physical storage location for personal information is established and access control procedures are established and operated.

 

Article 7 (Matters Regarding Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)

① The “Company” uses 'cookies' that store and retrieve usage information from time to time to provide users with individually customized services.

 

② Cookies are a small amount of information sent by the server (http) used to operate the website to the user's computer browser and are also stored on the hard disk of the user's PC computer.

A. Purpose of use of cookies: These are used to provide optimized information to users by identifying the types of visits and usage of each service and website visited by the user, popular search terms, and whether or not secure access is available.

B. Installation, operation, and rejection of cookies: You can refuse to store cookies by setting options in the Tools>Internet Options>Personal Information menu at the top of the web browser.

C. If you refuse to store cookies, you may experience difficulties in using customized services.

 

Article 8 (Personal Information Protection Officer)

① The “Company” is responsible for the overall personal information processing, and has designated a person in charge of personal information protection as follows to handle complaints and damage relief from information subjects related to personal information processing.

▶ Person in Charge of Personal Information Protection

Name: Steve Yang

Position: Team Leader

Title: Director

Contact : 82-2-3400-0509

 

▶ Department in Charge of Personal Information Protection

Department Name: R&D

Person in Charge : Yonghee Hyun

Contact : 82-2-3400-0509

 

② Information subjects may inquire about any personal information protection inquiries, complaints, damage relief, etc. to the person in charge and department in charge of personal information protection while using the service (or business) of e-future. The “Company” will respond and handle inquiries from the information subject without delay.

 

Article 9 (Request for Viewing Personal Information)

The information subject may file a request for access to personal information in accordance with Article 35 of the “Personal Information Protection Act” to the following department.

The “Company” will endeavor to promptly process the personal information access request of the information subject.

 

▶ Receiving and Processing Department of Personal Information Access Request

Department Name: R&D

Person in Charge : Yonghee Hyun

Contact : 82-2-3400-0509

 

Article 10 (Relief for Infringement of Rights)

The information subject may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency’s Personal Information Infringement Report Center in order to receive relief from personal information infringement. In addition, for other personal information infringement reports and consultations, please contact the following organizations.

 

1. Personal Information Dispute Mediation Committee: (No area code) 1833-6972 (www.kopico.go.kr)

2. Personal Information Infringement Report Center: (No area code) 118 (privacy.kisa.or.kr)

3. Supreme Prosecution Service: (No area code) 1301 (www.spo.go.kr)

4. Korean National Police Agency: (No area code) 182 (ecrm.cyber.go.kr)

 

A person whose rights or interests have been infringed due to disposition or omission by the head of a public institution may file an administrative appeal in accordance with Article 35 (View of Personal Information), Article 36 (Correction/Deletion of Personal Information), Article 37 (Suspension of Personal Information Processing, etc.) of the “Personal Information Protection Act”.

※ Please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr) for more information on administrative appeals.

 

This Privacy Policy will be applied from October 4, 2022.

You can contact us online or by emailing us at inquiry@eltkorea.com.