Our constitution guarantees the basic rights of the people, including the right to privacy and freedom, as well as the secrecy of communications. Therefore, personal information and the covert investigation of private lives through wiretapping or eavesdropping are generally illegal. However, serious human rights violations are occurring due to illegal wiretapping and leaks of information in our society, threatening the free lives of individuals. In order to fundamentally eliminate the potential for violations of these basic rights, the "Company" aims to thoroughly protect the personal information of the "Users" and ensure the freedom of communication in the information society by specifying the following privacy policy. This privacy policy complies with the laws regarding the "Promotion of Information and Communication Network Utilization and Information Protection" and may be amended according to changes in policies of the state, related public institutions, and the company.
Our constitution guarantees the basic rights of citizens, including the privacy of personal life and freedom, as well as the confidentiality of communications. Therefore, the secret investigation of personal information and private life through wiretapping or eavesdropping is generally illegal. However, serious human rights violations are occurring due to illegal wiretapping and information leakage in our society, threatening the free lives of individual citizens. To fundamentally eliminate the potential for such violations of basic rights, the "Company" specifies the following privacy policy to thoroughly protect the personal information of "Users" and to ensure freedom of communication in the information society. This privacy policy complies with the "Act on Promotion of Information and Communications Network Utilization and Information Protection" and is subject to change according to the policies of the state and related public institutions.
You will be informed about what government agencies are involved, why they are necessary, and the procedures for management and protection, and your consent will be obtained. Users have the right not to agree to this, and if they do not agree, no additional information will be collected or shared.
Announcement date and effective date of the privacy policy: 2022.09.01
Purpose and use of personal information collection
Purpose and use of personal information collection
The purpose of collecting personal information from "users" is to provide optimal customized services to "users" through the "company" site, and the information collected will be immediately destroyed after the completion of the "service". The "company" provides various types of content both for free and for a fee. The "company" may post advertisements to provide various valuable services to "users". In this case, the examples of "users" can be selected and delivered as valuable advertisements through anonymization and adaptation.
Items of personal information collected and collection methods
Items of personal information collected and collection methods
"The company" collects the most essential personal information to provide the initial "service." The information collected before providing the "service" includes the "user"'s name, gender, date of birth, email, and so on. In addition, if necessary for providing the service, additional information may be requested, and the "user" can consent to this.
We inform you that the information provided at that time will not be used for any other purpose than providing the relevant "service" or any other purpose disclosed to the "user" in advance.
Retention and disposal of personal information
Retention and disposal of personal information
User's personal information will be retained by the Company while the User is receiving services provided by the Company and will be used for service provision. However, if the User requests to delete their information or terminate the service agreement according to the procedure described in '7. Access, correction, and deletion of personal information', and when the purpose for which the personal information was received from the User has been achieved (service completion), any collected personal information will be completely deleted from hard drives and the servers held by the Company, and will not be accessed or used for any purpose without the prior consent of the User.
Provision and sharing of personal information
Provision and sharing of personal information
In principle, the "Company" does not disclose the personal information of users who receive the "Service" to third parties or other corporate bodies. However, if the user consents to the smooth use and disclosure of the "Service", it may be necessary to disclose personal information for legal actions against those who violate the company's service terms, or use the service to intentionally cause legal harm to others, or engage in acts that violate public morals, or conduct intentional acts that disrupt social order, when there are sufficient grounds for judgment. The "Company" may share users' personal information with national institutions to provide better services. Even in this case, prior to the collection or provision of information, the user will be informed of which national institution is involved, why the information is needed, and details regarding its management and protection, and their consent will be sought. The user has the right not to consent; if they do not consent, no additional information will be collected or shared.
Additionally, in cases deemed necessary for public interest development such as statistical processing, academic research, or market research, information may only be provided in a form that does not identify specific individuals.
Operation and utilization of cookies
Operation and utilization of cookies
Installation and Operation of Automatic Personal Information Collection Devices and Related Refusal Matters
"The Company" operates 'cookies' that store and retrieve "Users"' information intermittently. A cookie is a very small text file sent by the server operating the website to the "User"'s browser, which is stored on the user's computer hard drive. "The Company" uses cookies for the following purposes.
Purposes of cookie usage
: Analyzing the frequency of access or visit times of members and non-members, identifying users' preferences and areas of interest, tracking habits, determining participation levels in various events, and the number of visits for targeted marketing and providing personalized services.
The "User" has the right to choose whether to accept cookies. Therefore, by setting the options in the web browser, the user can allow all cookies, confirm each time a cookie is stored, or refuse the storage of all cookies.
How to refuse cookie settings
: For example, you can refuse cookie settings by selecting options in your web browser that allow all cookies, confirm each time a cookie is stored, or refuse the storage of all cookies.
How to set it up
: For example, in Internet Explorer – at the top of the web browser, select Tools > Internet Options > Privacy. However, if the "User" refuses to accept cookies, there may be difficulties in providing services.
Technical/institutional management for privacy protection
Technical/institutional management for privacy protection
"The company" has established the following technical measures to ensure the security of personal information so that it is not lost, stolen, leaked, altered, or damaged while handling "users'" personal information.
"Users'" personal information is protected by passwords, and important data is protected through separate security features by encrypting files and transmission data or using file locking.
The company takes measures to prevent damage caused by computer viruses using antivirus programs. The antivirus program is updated regularly, and in the event of sudden virus outbreaks, it provides the updates immediately to prevent personal information breaches.
The company adopts security devices (SSL or SET) that utilize encryption algorithms to safely transmit personal information over the network.
To prevent breaches of "users'" personal information due to hacking, the company uses devices to block external intrusions and has intrusion detection systems installed on each server to monitor intrusions 24 hours a day. Therefore, the company backs up its systems and data in triplicate to protect against any potential instances of damage to "users'" personal information, and emphasizes compliance with this policy through regular training for responsible staff.
Access, correction, and deletion of one's personal information
Access, correction, and deletion of one's personal information
Users can view or correct their registered personal information at any time and may request the deletion of information. If you have any comments regarding personal information, please email the personal information management officer at support@whitemekorea.net, and we will take immediate action and notify you of the results.
Protection of minors' personal information
Protection of minors' personal information
Minors under the age of 20 should not send information about themselves to others carelessly and must obtain permission from their parents or legal guardians before sending. The "Company" does not request identification and other personal information from users under the age of 20 via email or other means without prior contact.
If you have received a suspicious personal information request from a staff member of the "Company," please promptly email the person in charge of managing your personal information as stated in section 7, regarding your right to access, correct, and delete your personal information.
Personal information complaint service
Personal information complaint service
The "Company" designates a person responsible for managing personal information as described below in order to protect the "User"'s personal information and to address any complaints related to personal information.
Personal Information Manager
Personal Information Manager
Name: Shin So-hyun
Phone: 1533-2081
Email: support@whitemekorea.net Users can report any privacy-related complaints arising from the use of the company's services to the person in charge of personal information management. The company promises to provide prompt and sufficient responses to users' reports.
If you need to report or consult about other personal information infringements, please contact the agencies below.
1. Personal Dispute Mediation Commission (www.kopico.go.kr) Phone number: 1833-6972
2. Privacy Mark Certification Committee (www.eprivacy.or.kr) Phone number: 02-550-9531~2
3. Supreme Prosecutors' Office Internet Crime Investigation Center (www.spo.go.kr) Phone number: 1301
4. National Police Agency Cyber Terror Response Center (cyberbureau.police.go.kr) Phone number: 182
The privacy policy of 'ISHIELD' will be implemented from September 1, 2022.
