Lablup Inc. (the “Company”) complies with the data privacy regulations under the Act on Promotion of Information and Communications Network Utilization and Information Protection, Personal Information Protection Act, Protection of Communications Secrets Act, Telecommunications Business Act, and relevant laws and regulations that apply to information and communications service providers. The Company is committed to protecting the interests of its users by establishing this Privacy Policy in accordance with relevant laws and regulations. This Privacy Policy applies to users of the services provided by the Company that reside outside of the Republic of Korea according to the terms below.
The Company collects the following minimal information necessary for the purposes of membership registration, efficient user consultation, and the provision of various other services.
The Company collects user personal information for the purpose of providing contents; providing customized services; delivery of products, invoices or other materials; identification and authentication; settlement of purchases and payments; collection of payments; and other services.
The Company also collects user personal information for the purposes of membership management, including identification and authentication of users for the use of membership services and its authentication system, prevention of misuse by bad members and unauthorized persons, confirmation of membership, identification and authentication of legal representative, retention of records for dispute resolution, processing of complaints, and delivery of notices.
The Company also collects user personal information for the purposes of development of new and customized services and for marketing and advertising, including providing new services and customized services, provision of services according to statistical characteristics and publication of advertisements, confirmation of service availability, provision of information regarding events and advertisements, determining access frequency, and statistics regarding members’ use of the services.
The Company will use personal information within the scope set forth in Article 2 and will, in principal, not use or disclose to third parties such personal information outside of such scope without the prior consent of the user, except in any of the following cases.
Entrusted Entities | Entrusted Work | Use and Retention Period |
---|---|---|
PayPal | Payment processing | Until termination of membership or the termination of the entrustment agreement |
In principle, personal information is destroyed without delay when the purpose of collecting and using personal information is achieved. However, certain personal information may be retained for the retention period stated below under the following circumstances.
Information Retained | Reason for Retention | Retention Period |
---|---|---|
Record of misuse | Prevention of misuse | 1 year |
Contents of questions/cooperation (if separate consent of user is obtained) | Processing of user consultation | 6 months |
Member information is retained if required to be retained under the Commercial Act, the Act on the Consumer Protection in Electronic Commerce, etc., or other relevant laws. The following are examples where relevant laws require the retention of information.
Information Retained | Relevant Laws | Retention Period |
---|---|---|
Records regarding contracts or subscription withdrawal | Act on the Consumer Protection in Electronic Commerce, Etc. | 5 years |
Records regarding payment and supply of goods and services | Act on the Consumer Protection in Electronic Commerce, Etc. | 5 years |
Records regarding consumer complaints or dispute resolution | Act on the Consumer Protection in Electronic Commerce, Etc. | 3 years |
Records regarding labeling and advertising | Act on the Consumer Protection in Electronic Commerce, Etc. | 6 months |
Books and records for transactions as required by tax laws | Framework Act on National Taxes, Corporate Tax Act | 5 years |
Records regarding electronic financial transactions | Electronic Financial Transactions Act | 5 years |
Log-in records | Protection of Communications Secrets Act | 3 months |
In principle, personal information is destroyed without delay when the purpose of collecting and using personal information is achieved. The destruction procedure are methods are as follows.
Cookies are used to determine visits and uses of the services and the website, popular search words, and the scale of users to provide users with optimized and customized information, including advertisements.
The Company takes strong technical and managerial measures to secure user personal information and prevent such information from being lost, stolen, leaked, falsified, or damaged, as follows.
The Company established and implements a plan for the internal management of personal information for the secure processing of personal information.
Member passwords are encrypted, stored and maintained and only members that know their password can confirm or modify their personal information.
The Company uses best efforts to prevent the leakage or loss of its members’ personal information due to hacking or computer viruses. In case of loss of personal information, the Company stores back up data and uses the latest vaccine programs to prevent the leakage or loss of personal information. The Company also utilizes encrypted communication channels for the secure transfer of personal information. The Company also utilizes firewalls that will prevent unauthorized access and is committed to using all technological equipment possible for the security of its systems.
The Company uses best efforts to prevent infringement of personal information. In order to prevent infringement of personal information, the Company stores and manages access records for a period of at least 6 months that includes technical measures to make the record immutable and to prevent fraudulent entries.
The Company keeps employees that handle personal information to a minimum and provides them with separate passwords that are renewed on a regular basis. The Company continuously emphasizes compliance with the Privacy Policy in its regular training of such employees.
The Company operates a Personal Information Protection Department that checks whether the Company and its employees are in compliance with this Privacy Policy and upon discovering any issues seeks to resolve such issues immediately. However, if the Company fulfilled all its personal information protection obligations, the Company shall not be liable for any losses arising from a user’s negligence, incidents not under the Company’s control, or any other event not resulting from the Company’s fault.
You can refer any questions, complaints, or requests for relief regarding personal information to the Chief Privacy Officer or Personal Information Protection Department. The Company will use best efforts to swiftly provide a satisfactory response.
Title | Chief Privacy Officer | Title | Personal Information Manager |
---|---|---|---|
Name | Jeongkyu Shin | Name | Jungseung Yang |
Company | Lablup Inc. | Company | Lablup Inc. |
Phone | (82) 070-8200-2587 | Phone | (82) 070-8200-2587 |
contact@lablup.com | jsyang@lablup.com |
Please note that this Privacy Policy does not apply to the collection of personal information by websites with their links provided in the Company’s internet service.
Any additions, deletions, or revisions to this Privacy Policy will be notified to users at least 7 days in advance on the Company’s homepage. However, any changes that substantially affect user rights under this Privacy Policy, such as the use and collection of personal information or provision of personal information to third parties, will be notified to users at least 30 days in advance.
This Privacy Policy will be effective as of AUG. 16th, 2019.