개인정보취급방침_영어

[Effective date: May 10, 2021]

Screw Bar Inc. ("us", "we", or "our") complies with the personal information protection regulations of related laws and regulations that the information service providers must comply with such as Personal Information Protection Act, Act on Promotion of Information and Communications Network Utilization and Data Protection, ETC.

Our Privacy Policy includes the following:

Significance of Privacy Policy
Information we collect
Purposes of handling personal information
Period of retention and use of personal information, procedure and method of destruction of personal data
Information we provide to third party
Right and obligations of users and their legal representatives for private information
Managing mobile application
Installation, operation and denial of automatic private information collection system
Person in charge of privacy protection and contact information
Revisions to the Privacy Policy

1. Significance of Privacy Policy

We are committed to protecting the rights and interests of Gudak users by establishing Privacy Policy in agreement with related legislations.

The policy provides transparent information regarding the types, use, sharing parties, and purposes of use of personal information.
This policy instructs users of their rights and obligations of main agents of information.
This policy informs users to whom they should contact when they have to restore damages and prevent additional damages of personal information.

2. Information we collect

The policy provides transparent information regarding the types, use, sharing parties, and purposes of use of personal information.

- Category : Necessary Information

- Types of information used : Email addresses, Passwords

- Purposes of use

and disturbance of terms and conditions and Privacy Policy, and announcing problems and accidents regarding privacy protection
1) Operating and managing membership services (sign-up and withdrawal)3) Informing
2) Communicating with users for various purposes: notifying revision, suspensiondisturbanceresults of handling complaints and problems with regard to services
4) Exercising rights to browse and revise personal information in accordance with Personal Information Protection Act
5) Fulfilling obligations of retention in accordance with Act on Promotion of Information

- Category : Necessary Information (generated information)

- Types of information collected and used : Activity records collected through analytics provided by mobile platform services such as Facebook, Personal information provided by users, OS versions of users’ phones,
Token IDs of users’ phones GPS coordinates collected through pictures, Addresses collected from pictures. Transformed or updated address information collected from coordinates

- Purposes of use

1) Identifying users’ use of Service

2) Fulfilling obligations of retention and provision of information

3) Analyzing frequency of users’ access

- Expanding service infrastructure
4) Statistically applying for customizedforimproving Serviceservices

2. Collecting Method

1) We collect personal information when users first sign-in to Gudak through mobile Application.

2) Customer service center collects users’ personal information through web-page, e-mail, fax, and phone call.

3. Purposes of handling personal information

Following the contract with regard to providing service: providing contents
Managing customers: personal identification for use of services, preventing faulty and unapproved customers, age check, agreement from the users’ legal representatives (only for children users under 14), handling complaints and problems, and making notices for updates
Using the data for marketing or advertisement, improving and specializing new services (products), publicizing certain services and advertisement based on the demographic features, and statistically analyzing frequency of access or use of services

4. Period of retention and use of personal information, procedures and the method of destruction of personal data

In principle, we destruct the personal information immediately after the purposes of its collection and use have been achieved without delay. Only under conditions listed below, we retain personal information for extra period.

2) Extra retaining information: e-mail address, sign-in date
1) Extra retention period: 6 months after withdrawal (for handling out complaints, until those are resolved)
Preventing users who violated Terms of Service or abused the Service from re-entering and handling out various kinds of,withdrawal datecomplaints
Under the condition that users requested or approved to retain the information for extra period
1) Extra retaining period and information: retain information that users requested or approved to retain for the period they expect
Under the condition that we decided to retain information without approval in accordance with Statutory Provisions

1. Relevant Statutory Provisions : Consumer Protection Act in Electronic Commerce
Information retained : Records of contract or subscription withdrawal
Retention period : 5 years

2. Relevant Statutory Provisions : Consumer Protection Act in Electronic Commerce, Commercial Law, Basic Law of National Taxes, Income Tax Law, Corporate Tax Act, Value-added Tax Act
Information retained : Records of payment and supply of service, statement of commercial book and sales, documentary evidence

Retention period : 5 years

Information
3. Relevant Statutory Provisions : Consumer Protection Act in Electronic Commerceretained : Records of consumer complaint or its resolution

Retention period : 3 years

4. Relevant Statutory Provisions : Protection of Communications Secrets Act

Information retained : Visiting records of web sites

Retention period : 3 months

4. Application of personal information expiration date system

If any activity or facts showing use of Service for 1 year (“Personal information expiration date”) after sign-in is detected, we separately store and manage personal information, notifying the action to users in advance according to Act on the Promotion of Information and Communications Network Utilization and Information Protection, for the purpose of protection of information and prevention of accidents. We notify users of the expiration of their personal information through e-mails, text messages, or phone calls 30 days in advance. However, personal information can be retained for certain period designated by legislation after the expiration date under the consent of users if any other legislation establishes its retention period. According to the private information expiration date system, users whose private information is separated still can re-use Service after additional identification process.

5, Procedure of destruction of personal data

After the purpose of personal information is achieved, the information input by the main agents of the information is transferred to a separate database (or separate filing cabinets for hard copies) and retained as required by internal policy and other relevant laws and regulations before destruction. In such event, the personal information which is stored and managed separately will never be used for any other purposes unless otherwise required by law.

6. Methods of destruction of personal data

We delete personal information stored in the form of electronic files by using technological methods that prevent the record from restoration. We destruct hard copies of personal information by shredding with a pulverizer or incinerating it.

5. Information we provide to third party

1) when
We use personal information within the scope set in “2. Purposes of handling personal information,” and in principle, we do not exceed the scope or disclose personal data to any third party without the consent of the users except for the following casestheusers consent to share in advance;
We retain items that users request or agree with the retention for the period they decide.
2) when required by law; or if required to be disclosed by investigative agencies for investigation purposes following the procedure and method as prescribed in the laws and regulations:

6. Right and obligations of users and their legal representatives for private information

Users or/and their legal representatives of the information can view or modify their registered personal information and request deletion or temporary suspension of treatment of personal information at any time.
In order for users or/and their legal representatives to directly browse, modify or withdraw their account, they should click ‘account information’ (for modification) or ‘withdrawal’ (for withdraw). Otherwise, contact the person in charge of managing personal information via written documents, phone call, or email, and we will take measures without delay.
If any users request modifying errors, we do not disclose or use the information until it is completely modified. Moreover, in cases where we already disclosed the unmodified information to third party, we notify the result of modification to the third party without any delay.

7. Managing mobile application

We notify, receive consent from users about access to their mobile phones in the scope of collecting and using their personal information before we collect it.
Even if users approved us the access to their phone, we do not collect all of the information under the access scope.

8. Installation, operation and denial of automatic private information collection system

Even if you delete the app on your smart phones, the membership account will be retained. If you want to withdraw the membership, please use ‘withdrawal’ function before you delete the app.

9. Person in charge of privacy protection and the contact information

You may notify the persons in charge of protecting personal information about any related complaints generated when using our website, etc. We will respond promptly and adequately to your reports.

1. Person in charge of privacy protection
- Name : Sanghoon Kang

- Position : CEP
- Contact number : (+82) 02-3453-2902

- E-mail : contact@screw-bar.com

If you need to report or consult about other privacy infringement issues, please contact the following organizations:

Personal Information Infringement Report Center (http://privacy.kisa.or.kr / 118 without area code)
Cybercrime Investigation Division, Supreme Prosecutors’ Office (http://www.spo.go.kr / 1301 without area code)
Cyber Bureau, National Police Agency(http://cyberbureau.police.go.kr / 182 without area code)

10. Revisions to the Privacy Policy

We may add, delete, or modify the contents of this Privacy Policy and, in such cases, we will make a public announcement through push notice at least 7 days in advance. However, if there are any significant changes in the users’ rights, such as the collection and use of personal information, we will notify the users at least 30 days in advance through e-mail or ‘Notice’ bulletin board of our website. If needed, we may receive users’ consent again.