Privacy Policy
SOFTonNET Inc. ("http://www.softonnet.com/", hereinafter the "SOFTonNET website") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act (PIPA)
of the Republic of Korea, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
○ All statutes, enforcement decrees, public notices and public institutions referred to in this Privacy Policy are those of the Republic of Korea. This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Korea, and any dispute arising in connection with it is resolved in accordance with the laws of the Republic of Korea.
○ This English text is provided for the convenience of readers. It is a translation and may contain errors. Where it differs from the Korean text, or where any part of it is unclear, the Korean original and the interpretation of the courts of the Republic of Korea prevail.
○ Korean original:
개인정보 처리방침 (Privacy Policy in Korean)
○ This Privacy Policy takes effect on 1 January 2021.
Article 1 (Purposes of Processing Personal Information)
SOFTonNET Inc. processes personal information for the purposes set out below. The personal information processed will not be used for any purpose other than those stated, and where the purpose of use changes, SOFTonNET Inc. will take the necessary measures, such as obtaining separate consent under Article 18 of PIPA.
① Handling of civil enquiries
- Personal information is processed for the purposes of verifying the identity of the enquirer, confirming the substance of the enquiry, contacting and notifying the enquirer for fact-finding, and communicating the outcome.
② Marketing and advertising
- Personal information is processed for the purposes of developing new services (products) and providing tailored services, delivering information on events and promotions and offering opportunities to take part, providing services and placing advertisements according to demographic characteristics, verifying the effectiveness of services, ascertaining access frequency, and compiling statistics on members' use of services.
Article 2 (Processing and Retention Periods of Personal Information)
① SOFTonNET Inc. processes and retains personal information within the retention and use period prescribed by law, or within the retention and use period consented to by the data subject at the time of collection.
② The processing and retention period for each category is as follows.
- Handling of civil enquiries
Personal information relating to <handling of civil enquiries> is retained and used for the above purpose for <three years> from the date of consent to its collection and use.
- Basis for retention: preservation of records on the handling of consumer requests and enquiries
- Relevant statutes: 1) Records on the collection, processing and use of credit information: 3 years
2) Records on consumer complaints or dispute resolution: 3 years
Article 3 (Provision of Personal Information to Third Parties)
① SOFTonNET Inc. processes personal information only within the scope specified in Article 1 (Purposes of Processing Personal Information), and provides personal information to third parties only where Articles 17 and 18 of PIPA apply, such as with the consent of the data subject or under special provisions of law.
Article 4 (Entrustment of Personal Information Processing)
① SOFTonNET Inc. does not entrust personal information processing to any external organisation.
Article 5 (Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them)
① A data subject may at any time exercise rights against SOFTonNET Inc., including the right to request access to, correction of, deletion of, or suspension of the processing of their personal information.
② The rights under paragraph ① may be exercised against SOFTonNET Inc. in writing, by e-mail or by facsimile (FAX) pursuant to Article 41(1) of the Enforcement Decree of PIPA, and SOFTonNET Inc. will act on such requests without delay.
③ The rights under paragraph ① may be exercised through an agent, such as the legal representative of the data subject or a duly authorised person. In such cases a power of attorney in the form of Annex No. 11 of the "Notice on Methods of Personal Information Processing (No. 2020-7)" must be submitted.
④ Requests for access to and suspension of the processing of personal information may be restricted under Article 35(4) and Article 37(2) of PIPA.
⑤ Correction or deletion of personal information may not be requested where the personal information concerned is specified as subject to collection under other statutes.
⑥ Where a request for access, correction, deletion or suspension of processing is made in exercise of a data subject's rights, SOFTonNET Inc. verifies that the person making the request is the data subject or a duly authorised agent.
Article 6 (Categories of Personal Information Processed)
< Handling of civil enquiries >
- Required items: name, company name, e-mail address, mobile telephone number
Article 7 (Destruction of Personal Information)
① Where personal information becomes unnecessary — for example because the retention period has elapsed or the purpose of processing has been achieved — SOFTonNET Inc. destroys it without delay.
② Where personal information must continue to be preserved under other statutes even though the retention period consented to by the data subject has elapsed or the purpose of processing has been achieved, the personal information concerned is moved to a separate database (DB) or kept in a different storage location.
1. Statutory basis:
2. Personal information items preserved: account information, transaction date
③ The procedure and method of destruction are as follows.
1. Destruction procedure
SOFTonNET Inc. selects the personal information for which grounds for destruction have arisen and destroys it with the approval of the Personal Information Protection Officer of SOFTonNET Inc.
2. Destruction method
Information in the form of electronic files is destroyed using technical methods that make the records irreproducible.
Article 8 (Measures to Ensure the Security of Personal Information)
SOFTonNET Inc. takes the following measures to ensure the security of personal information.
1. Minimising and training staff who handle personal information
SOFTonNET Inc. designates the staff who handle personal information and limits them to the officers in charge, thereby implementing measures to manage personal information with the fewest people possible.
2. Establishment and implementation of an internal management plan
An internal management plan is established and implemented for the safe processing of personal information.
3. Technical measures against hacking and similar threats
To prevent the leakage or damage of personal information through hacking or computer viruses, the SOFTonNET website installs security software and updates and inspects it regularly, installs its systems in areas to which external access is controlled, and monitors and blocks access by technical and physical means.
4. Encryption of personal information
Users' passwords are stored and managed in encrypted form so that only the individual concerned knows them. Important data is protected by separate security functions, such as encrypting files and transmitted data or using file locking.
5. Restriction of access to personal information
SOFTonNET Inc. takes the measures necessary to control access to personal information by granting, changing and revoking access rights to the database system that processes personal information, and controls unauthorised access from outside using an intrusion prevention system.
Article 9 (Installation and Operation of Devices that Automatically Collect Personal Information, and Refusal Thereof)
SOFTonNET Inc. does not use "cookies", which store and retrieve usage information of data subjects from time to time.
Article 10 (Personal Information Protection Officer)
① SOFTonNET Inc. designates a Personal Information Protection Officer as set out below, who has overall responsibility for work relating to the processing of personal information and who handles complaints and remedies for damage from data subjects in relation to such processing.
▶ Personal Information Protection Officer
Name: In Yeon-jin (인연진)
Role: Personal Information Protection Officer
Title: Executive Director (전무)
Contact: +82-2-3484-0502, yjin@softonnet.com, FAX +82-2-3484-0530
※ You will be connected to the department in charge of personal information protection.
▶ Department in charge of personal information protection
Department: Management Support Team
Person in charge: Kim Yeo-jin (김여진)
Contact: +82-2-3484-0500, yjkim@softonnet.com, FAX +82-2-3484-0530
② Data subjects may direct any enquiries, complaints or requests for remedies relating to personal information protection that arise in the course of using the services (or business) of SOFTonNET Inc. to the Personal Information Protection Officer or the department in charge. SOFTonNET Inc. will answer and act on such enquiries without delay.
Article 11 (Requests for Access to Personal Information)
A data subject may submit a request for access to personal information under Article 35 of PIPA to the department below. SOFTonNET Inc. will endeavour to process such requests promptly.
▶ Department receiving and handling requests for access to personal information
Department: Management Support Team
Person in charge: Kim Yeo-jin (김여진)
Contact: +82-2-3484-0500, yjkim@softonnet.com, FAX +82-2-3484-0530
Article 12 (Remedies for Infringement of Rights)
To obtain redress for infringement of personal information, a data subject may apply for dispute resolution or counselling to bodies such as the Personal Information Dispute Mediation Committee or the Personal Information Infringement Report Centre of the Korea Internet & Security Agency. For other reports of and counselling on personal information infringement, please contact the organisations below.
The telephone numbers below are Korean domestic numbers. They are short codes or nationwide representative numbers and may not be reachable from outside the Republic of Korea. Where a number cannot be dialled from abroad, please use the website shown next to it.
1. Personal Information Dispute Mediation Committee: 1833-6972 (Korea) (www.kopico.go.kr)
2. Personal Information Infringement Report Centre: 118 (Korea) (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (Korea) (www.spo.go.kr)
4. Korean National Police Agency: 182 (Korea) (cyberbureau.police.go.kr)
A person whose rights or interests have been infringed by a disposition taken, or by an omission, by the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information) or Article 37 (Suspension of Processing of Personal Information) of PIPA may file an administrative appeal as provided by the Administrative Appeals Act.
※ For details of administrative appeals, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).
Article 13 (Changes to this Privacy Policy)
① This Privacy Policy takes effect on 1 January 2021.
