In accordance with Article 30 of the Personal Information Protection Act, SAENS establishes and discloses personal information processing policies as follows to protect personal information of information subjects and to handle related grievances quickly and smoothly.
○ This personal information processing policy will take effect from September 26, 2022.
Article 1 (Purpose of Processing Personal Information)
SAENS processes personal information for the following purposes: The personal information being processed will not be used for any of the following purposes, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.
1. Registering and managing membership on the website
Personal information is processed for the purpose of identifying and certifying oneself according to the provision of membership services.
2. Providing goods or services
Personal information is processed for the purpose of providing content, paying fees, and settlement.
Article 2 (Processing and Retaining Period of Personal Information)
① SAENS processes and holds personal information within the period of holding and using personal information or the period of holding and using personal information agreed upon when collecting personal information from the data subject under the law.
② Each personal information processing and holding period is as follows.
Article 3 (items of personal information to be processed)
① SAENS is processing the following privacy items:
Article 4 (Matters concerning the processing of personal information for children under the age of 14)
① [Personal Information Processor Name] collects the minimum amount of personal information necessary for performing the service with the consent of the legal representative when collecting personal information for children under the age of 14.
• Required items: Name, relationship, and contact information of legal representative
② In addition, when collecting children's personal information for the promotion of [Processing Purpose] of [Personal Information Processor Name], separate consent is obtained from the legal representative.
③ When collecting personal information of a child under the age of 14, [personal information controller] may request minimum information, such as the name and contact number of the legal representative, and verify that the legal representative has agreed to it in one of the following ways.
• A method of requiring a legal representative to indicate whether he/she agrees or not on the Internet site where the consent content is posted, and notifying the legal representative's mobile phone text message that the personal information controller has confirmed the consent indication
• Method of requiring legal representatives to indicate whether they agree or not on the Internet site where consent is posted, and receiving card information such as credit card or debit card of legal representatives
• A method of requiring a legal representative to indicate whether he/she agrees or not on the Internet site where the consent is posted, and verifying his/her identity through his/her mobile phone authentication, etc
• Method of issuing a written consent form directly to the legal representative, or delivering it by mail or fax, and requiring the legal representative to sign and seal the consent form
• How to send an e-mail with consent and receive an e-mail with an expression of consent from a legal representative
• How to inform the legal representative of the contents of consent through the phone, obtain consent, or check the contents of consent, such as the Internet address, and obtain consent through the phone call again
• Other methods of notifying the legal representative of the contents of consent in a manner equivalent to the above and confirming the expression of intention of consent;
Article 5 (Procedure and Method of Destruction of Personal Information)
① SAENS shall destroy the personal information without delay when personal information becomes unnecessary, such as the lapse of the personal information retention period and the achievement of the purpose of processing.
② If the personal information retention period agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information shall be transferred to a separate database (DB) or stored in a different storage place.
1. Legal basis:
2. Personal information items to be preserved: account information, transaction date
③ The procedures and methods of destroying personal information are as follows.
1. Destruction procedure
SAENS selects personal information for which the cause of destruction occurred, and destroys personal information with the approval of the personal information protection manager of SAENS.
Article 6 (Matters concerning the rights and obligations of the information subject and legal representative, and the method of exercising them)
① The information subject may exercise the right to SAENS at any time, such as requesting access, correction, deletion, and suspension of processing of personal information.
② The exercise of rights under paragraph (1) can be made in writing, e-mail, facsimile (FAX) in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act, and SAENS will take action without delay.
③ The exercise of rights under paragraph (1) may be conducted through an agent, such as a legal representative of the information subject or a person entrusted.In such cases, "Public Notice on the Method of Processing Personal Information (No. 2020-7)" You must submit a power of attorney in attached Form 11.
④ Requests for access to personal information and suspension of processing may be restricted under Articles 35 (4) and 37 (2) of the Personal Information Protection Act.
⑤ A request for correction and deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.
⑥ SAENS verifies whether the person who made the request for perusal, correction or deletion, or suspension of processing, etc. according to the right of the information subject is the person who made the request or a legitimate agent.
Article 7 (Matters concerning measures to secure the safety of personal information)
SAENS is taking the following measures to ensure the safety of personal information.
1. Encryption of personal information
The user's personal information is stored and managed by encrypting the password, so only you can know it, and important data uses separate security functions such as encrypting file and transfer data or using file lock function.
2. Restrictions on access to personal information
It takes necessary measures to control access to personal information by granting, changing, and canceling access to the database system that processes personal information, and controls unauthorized access from outside using the intrusion prevention system.
Article 8 (Matters concerning the installation and operation of devices that automatically collect personal information and their refusal)
SAENS does not use 'cookie', which stores information on the use of information subjects and invokes them from time to time.
Article 9 (Matters concerning the person in charge of personal information protection)
① SAENS is in charge of handling personal information, and designates a person in charge of personal information protection as follows to handle complaints and remedy damages by information subjects related to personal information processing.
▶ Person in charge of personal information protection
Name: Song Sang-hoon
Position: Manager
Position: Manager
Contact: songsh5775@gmail.com
※ You will be connected to the department responsible for privacy.
▶ Personal Information Protection Department
Department name: -
Person in charge: Song Sang-hoon
Contact: songsh5775@gmail.com
② The information subject can contact the personal information protection manager and the department in charge for all personal information protection inquiries, complaints, and damage relief that have occurred while using SAENS' service (or business). SAENS will answer and process inquiries from the information subject without delay.
Article 10 (Department that receives and processes requests for access to personal information)
The information subject may request the following departments for access to personal information under Article 35 of the ｢ Personal Information Protection Act.
SAENS will try to expedite the request for access to personal information by the information subject.
▶ Personal Information Protection Department
Department name: -
Person in charge: Song Sang-hoon
Contact: songsh5775@gmail.com
Article 11 (Method of remedy for infringement of rights and interests of information subjects)
In order to receive relief from personal information infringement, information entities can apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee and the Korea Internet & Security Agency's Personal Information Infringement Reporting Center. In addition, please contact the institution below for other reports and consultations on personal information infringement.
1. Personal Information Dispute Mediation Committee: (without national number) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Reporting Center: 118 (privacy.kisa.or.kr)
3. Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
4. National Police Agency: 182 (ecrm.cyber.go.kr)
A person who has been infringed on his/her rights or interests due to disposition or omission by the head of a public institution in response to a request under Articles 35 (Personal Information Access), 36 (Correction or Deletion of Personal Information, etc.) of the Personal Information Protection Act may request an administrative trial as prescribed by the Administrative Appeals Act.
※ For more information on administrative trials, please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr).
Article 12 (Change of Personal Information Processing Policy)
① This personal information processing policy will be applied from September 26, 2022.