Privacy Policy

In accordance with Article 30 of the Personal Information Protection Act, WEFLO (hereinafter referred to as the "Company") establishes and discloses guidelines for processing personal information as follows in order to protect the personal information of the data subject and to promptly and smoothly deal with related grievances.

Article 1 (Purpose of Processing Personal Information)

The company processes personal information for the following purposes: The personal information being processed will not be used for any purpose other than the following purposes, and if the purpose of use is changed, necessary measures will be implemented, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.

1. Membership and management of the website

Personal information is processed for the purpose of confirming the intention to join the membership, identification and certification based on the provision of membership services, maintenance and management of membership, identification based on the implementation of a limited identification system, prevention of illegal use of services, confirmation of the consent of a legal representative when processing personal information for children under the age of 14, various notices and notices, and grievances.

2. the provision of goods or services

Personal information is processed for the purpose of delivering goods, providing services, sending contracts and bills, providing content, providing customized services, self-identification, age certification, payment and settlement of charges, and collection of bonds.

3. the handling of grievances

Personal information is processed for the purpose of identifying civil petitioners, confirming civil complaints, contacting and notifying them for fact-finding, and notifying them of the results of processing.

Article 2 (Processing and Retaining Period of Personal Information)

① The company processes and holds personal information within the period of retention, use, or use of personal information agreed upon when collecting personal information from the data subject according to laws and regulations.
② Each of these personal information processing and retention periods is as follows.

1. Inquiries through the website: Retaining personal information for 3 years after Donghee

However, in the following cases, until the end of the relevant reason:

  1. Where an investigation, investigation, etc. is in progress for violation of relevant laws and regulations, the relevant investigation and investigation shall be completed until the completion of the investigation.
  2. If the bond and debt relationship remains due to the use of the website, until the relevant bond and debt relationship is settled.

Article 3 (Rights of users and legal representatives and methods of exercising them)

① The data subject may exercise the following privacy-related rights against the company at any time:

  1. Request to view personal information
  2. Request for correction if there is an error, etc.
  3. Request for deletion
  4. Request to stop processing
    ② The exercise of the rights under paragraph 1 may be made to the company in writing, by telephone, by e-mail, by copy (FAX), etc., and the company will take action without delay.
    ③ If the data subject requests correction or deletion of an error in personal information, the company will not use or provide the personal information until the correction or deletion is completed.
    ④ The exercise of rights under paragraph 1 may be made through an agent, such as a legal representative of the data subject or a person who has been delegated. In this case, you must submit a power of attorney in accordance with the attached Form 11 of the Enforcement Regulations of the Personal Information Protection Act.
    ⑤ The data subject shall not infringe on the personal information and privacy of the data subject or others that the company is processing in violation of related laws such as the Personal Information Protection Act.

Article 4 (Personal Information Items to be Processed)
The company is processing the following privacy items.

  1. Inquiries through the website
    Required items: Name, company name, phone number
    Selections: Position, e-mail
  2. In the process of using the Internet service, the following personal information items can be automatically generated and collected.
    IP address, cookie, MAC address, service usage record, visit record, bad usage record, etc.

Article 5 (Destruction of Personal Information)
① When personal information becomes unnecessary, such as the expiration of the retention period of personal information or the achievement of the purpose of processing, the company will destroy the personal information without delay.
② If the retention period of personal information agreed by the data subject has elapsed or the purpose of processing has been achieved, the personal information needs to be preserved according to other laws and regulations, the personal information is transferred to a separate database (DB) or stored differently.
③ The procedures and methods of destroying personal information are as follows.

  1. procedure for destruction
    The company selects personal information for which the reason for destruction has occurred and destroys the personal information with the approval of the company's personal information protection officer.
  2. How to destroy
    The company destroys personal information recorded and stored in the form of electronic files by using methods such as Low Level Format so that records cannot be reproduced, and the personal information recorded and stored in paper documents is destroyed by crushing or incineration with a shredder.

Article 6 (Measures to ensure the safety of personal information)
The company is taking the following measures to ensure the safety of personal information.

  1. Management measures: Establishment and implementation of internal management plans, regular employee training, etc.
  2. Technical Measures: Management of Access Rights of Personal Information Processing Systems, etc., Installation of Access Control Systems, Unique Identification Information
    Encryption, security program installation, etc.
  3. Physical measures: Control access to computerized rooms, data storage rooms, etc.

Article 7 (Matters concerning the installation, operation, and refusal of automatic personal information collection devices)
① The company uses a "cookie" that stores usage information and fetches it from time to time to provide individual customized services to users.
② Cookies are small amounts of information sent by the server (http) used to run the website to the user's computer browser and are sometimes stored on hard disks in the user's computer.
A. Purpose of use of cookies: It is used to provide optimized information to users by identifying the type of visits and use of each service and website visited by the user, popular search terms, security access, etc.
B. Installation, operation, and rejection of cookies: You can refuse to save cookies through the Tools at the top of the web browser > Internet Options > Options settings on the Privacy menu.
C. Refusing to save cookies may cause difficulties in using customized services.

Article 8 (Personal Information Protection Officer)
① The company is in charge of handling personal information, and designates a person in charge of personal information protection as follows to handle complaints and remedy damages by data subjects related to personal information processing.

▶ Personal Information Protection Officer
Name: OOO
Position: OOO
Contact: ,
※ You will be connected to the privacy department.

▶ Personal Information Protection Department
Department Name: OOO Team
Contact Person: OOO
Contact: ,

② The data subject may contact the person in charge of personal information protection and the department in charge for any personal information protection inquiries, complaints, damage relief, etc. that have occurred while using the company's service (or business). The company will respond and process the data subject's inquiries without delay.

Article 9 (Method of Remedy for Infringement of Rights)
The data subject can inquire about damage relief and counseling for personal information infringement from the following institutions.

▶ Personal Information Infringement Reporting Center (operated by the Korea Internet & Security Agency)

  • Affiliated duties: Report personal information infringement and apply for counseling
  • Home page: privacy.kisa.or.kr
  • Phone: 118 (without country code)
  • Address: (5832) Personal Information Infringement Reporting Center, 3rd Floor, Jinheung-gil 9 (301-2 Bitgaram-dong), Naju-si, Jeollanam-do

▶ Personal Information Dispute Mediation Committee

  • Affiliated duties: Application for personal information dispute mediation, collective dispute mediation (civil settlement)
  • Home page: www.kopico.go.kr
  • Phone: (No Number) 1833-6972
  • Address: (03171) 4th floor of Government Complex Seoul, 209, Sejong-daero, Jongno-gu, Seoul

▶ Cybercrime Investigation Team of the Supreme Prosecutors' Office: 02-3480-3573 (www.spo.go.kr )
▶ Cyber Security Bureau, National Police Agency: 182 (http://cyberbureau.police.go.kr )

Article 10 (Enforcement and Change of Personal Information Processing Policy)
This privacy policy will take effect from April 1, 2024.