Privacy Policy
Effective date: [시행일]
In accordance with the Personal Information Protection Act and other applicable laws, [사이트명] (the "Site") establishes and publishes this Privacy Policy to protect users' personal information and to handle related complaints promptly and smoothly.
1. Purposes of Processing Personal Information
The Site processes personal information for the following purposes. If a purpose changes, the Site takes the necessary measures required by applicable laws, such as obtaining separate consent.
- Membership sign-up and management: identifying members, verifying identity (email verification), maintaining and managing membership, preventing misuse, and sending notices
- Providing the Service: boards, comments, messages, notifications and other services, and finding IDs and passwords
- Operating the Service safely: keeping access records, responding to security incidents, and usage statistics
2. Personal Information Processed
- Required: ID, password (stored encrypted), email, display name
- Optional: phone number, profile photo, self-introduction
- Information generated automatically while using the Service: IP address, access time, service usage records, cookies, browser information
3. Processing and Retention Period
- Member information is kept until the member leaves and is destroyed without delay after the member leaves.
- However, information that must be kept under applicable laws is kept for the required period.
- Service visit records (access logs, IP addresses): 3 months (Protection of Communications Secrets Act)
- Records of consumer complaints or dispute handling: 3 years (Act on the Consumer Protection in Electronic Commerce, where applicable)
4. Provision of Personal Information to Third Parties
The Site processes users' personal information only within the purposes in Section 1 and does not provide it to third parties except with the user's consent or where the law specifically provides otherwise.
5. Outsourcing of Personal Information Processing
The Site may outsource personal information processing as follows to provide the Service smoothly. If it does, it discloses the contractor and the outsourced work in this Privacy Policy.
- [수탁자명]: [위탁 업무 내용 — 예: 이메일 발송, 서버 운영]
6. Procedures and Methods of Destruction
- Personal information whose retention period has ended or whose processing purpose has been achieved is destroyed without delay.
- Electronic files are deleted in a way that cannot be recovered, and paper documents are shredded or incinerated.
- Information that must continue to be kept under applicable laws is stored separately from other personal information.
7. Rights and Obligations of Data Subjects and How to Exercise Them
- Users may request access to, correction, deletion or suspension of processing of their personal information at any time.
- Users can view and edit their information directly on the My Info screen and withdraw consent by leaving the membership. Other requests can be made to the Privacy Officer below in writing, by email or by other means, and the Site will act without delay.
- Rights may also be exercised through a legal representative or an authorized person.
8. Measures to Ensure the Security of Personal Information
- Passwords are encrypted and stored in a way that cannot be decrypted.
- Login information is exchanged as encrypted tokens, and important settings are stored encrypted.
- The number of administrators who process personal information is kept to a minimum, and administrator privileges are controlled by policy.
- Access records are kept and reviewed, and security updates are applied.
9. Installation, Operation and Refusal of Cookies
- The Site uses cookies to keep users logged in and to remember language and theme settings.
- Users can refuse to store cookies in their browser settings. However, if they do, they cannot use services that require login.
10. Privacy Officer
The Site designates the following Privacy Officer to oversee personal information processing and to handle related complaints and remedies for damage.
- Name: [성명]
- Position: [직책]
- Contact: [이메일], [전화번호]
11. Remedies for Infringement of Rights
If you need to report or get advice on an infringement of personal information, you can contact the following organizations.
- Personal Information Infringement Report Center (Korea Internet & Security Agency): 118 (no area code), privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
- Cyber Investigation Division, Supreme Prosecutors' Office: 1301 (no area code), www.spo.go.kr
- Cyber Investigation Bureau, Korean National Police Agency: 182 (no area code), ecrm.police.go.kr
12. Changes to the Privacy Policy
This Privacy Policy applies from [시행일]. If its contents change, the Site will notify users through announcements or this screen from 7 days before the change takes effect.