Culti Labs Co., Ltd. (hereinafter referred to as ‘Culti Labs’) establishes and discloses the following personal information processing guidelines in order to protect the personal information of website information subjects and to promptly and smoothly handle complaints related to this in accordance with Article 30 of the Personal Information Protection Act.
Article 1 (Purpose of Processing Personal Information)
‘Culti Labs’ processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following purposes, and if the purpose of use is changed, separate consent will be obtained in accordance with Article 18 of the Personal Information Protection Act.
1. Website Membership Registration and Management: Processing personal information for the purpose of confirming the intention to join, identifying and authenticating individuals for the provision of membership services, maintaining and managing membership qualifications, verifying identities according to the limited identity verification system, preventing improper use of services, confirming the consent of legal representatives for the processing of personal information of children under the age of 14, and providing various notifications and handling complaints.
2. Provision of Goods or Services: Processing personal information for the purpose of delivering goods, providing services, sending contracts/invoices, providing content, providing customized services, authenticating individuals, verifying age, processing payment/settlement of fees, and debt collection.
3. Handling of Complaints: Processing personal information for the purpose of confirming the identity of complainants, confirming complaints, contacting and notifying for fact-finding investigations, and notifying results of handling.
Article 2 (Period of Processing and Retention of Personal Information)
① ‘Culti Labs’ processes and retains personal information within the period of retention and use of personal information prescribed by laws or the period of consent obtained from the information subject at the time of collection.
② The period of processing and retention of each personal information is as follows.
1. Website Membership Registration and Management: Until the withdrawal from the business/organization website
However, in the following cases, until the end of the applicable reason
1) In case of ongoing investigation or investigation due to violation of related laws, until the end of the investigation
2) In case of remaining rights and obligations related to website usage, until the settlement of such rights and obligations
2. Provision of Goods or Services: Until the completion of supply of goods/services and completion of payment/settlement
However, in the following cases, until the end of the applicable period
1) Records related to transactions such as indication/advertisement, contract contents and performance, pursuant to the Act on Consumer Protection in Electronic Commerce, etc.
records of transactions
- Records related to indication/advertisement: 6 months
- Records of contracts or withdrawal of subscriptions, payment, supply of goods, etc.: 5 years
- Records of consumer complaints or dispute resolution: 3 years
2) Storage of communication fact confirmation data pursuant to Article 41 of the Act on Protection of Communication Secrets
- Data on subscriber's date and time of electronic communication, start/end time, counterpart subscriber number, usage frequency, and location tracking data of base station: 1 year
- Computer communication, internet log data, and access location tracking data: 3 months
Article 3 (Provision of Personal Information to Third Parties)
① ‘Culti Labs’ processes personal information within the scope specified in Article 1 (Purpose of Processing Personal Information) and provides personal information to third parties only when the information subject consents or when there are special provisions of the law such as Article 17 of the Personal Information Protection Act.
Article 4 (Rights and Obligations of Information Subjects and Methods of Exercise)
① Information subjects may exercise the following rights related to the protection of personal information against ‘Culti Labs’ at any time.
1. Request for Access to Personal Information
2. Request for Correction in Case of Errors
3. Request for Deletion
4. Request for Suspension of Processing
② Exercise of rights under paragraph 1 may be made to ‘Culti Labs’ in writing, by telephone, electronic mail, facsimile transmission (FAX), etc., and ‘Culti Labs’ will promptly take action on such requests.
③ If an information subject requests correction or deletion of personal information due to errors, ‘Culti Labs’ will not use or provide such personal information until the correction or deletion is completed.
④ Exercise of rights under paragraph 1 may be made through a legal representative or a delegate who has been entrusted. In this case, a power of attorney according to the format No. 11 attached to the Enforcement Rules of the Personal Information Protection Act must be submitted.
⑤ Information subjects shall not violate the Personal Information Protection Act or other related laws by infringing on the personal information and privacy of themselves or others being processed by ‘Culti Labs’.
Article 5 (Items of Personal Information Being Processed)
‘Culti Labs’ processes the following items of personal information:
1. Website Membership Registration and Management
․Required Items: Name, Date of Birth, ID, Password, Address, Phone Number, Gender, Email Address
․Optional Items: Content Area, Content Usage Period
2. The following items of personal information may be automatically generated and collected during the process of using internet services.
․IP Address, Cookie, MAC Address, Service Usage Record, Visit Record, Record of Malicious Use, etc.
Article 6 (Destruction of Personal Information)
① ‘Culti Labs’ promptly destroys the relevant personal information when it becomes unnecessary due to the expiration of the retention period for personal information or the achievement of the processing purpose.
② If personal information needs to be retained continuously under other laws despite the expiration of the retention period agreed upon by the information subject or the achievement of the processing purpose, ‘Culti Labs’ transfers the personal information to a separate database (DB) or stores it separately.
③ The procedure and method of personal information destruction are as follows:
1. Procedure for Destruction
‘Culti Labs’ selects the personal information for destruction when the reason for destruction occurs and destroys the personal information with the approval of ‘Culti Labs’ Personal Information Protection Officer.
2. Method of Destruction
‘Culti Labs’ destroys personal information recorded or stored in electronic file format using technical methods such as low-level formatting to make the records irreproducible, and personal information recorded or stored on paper documents is shredded or incinerated for destruction.
Article 7 (Measures for Securing Personal Information)
‘Culti Labs’ takes the following measures to ensure the security of personal information:
1. Management measures: establishment and implementation of internal management plan, regular employee training, etc.
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of unique identification information, etc., installation of security programs.
3. Physical measures: Access control to computer rooms, data storage rooms, etc.
Article 8 (Installation, Operation, and Rejection of Personal Information Automatic Collection Devices)
① ‘Culti Labs’ uses ‘cookies’ to store and retrieve usage information in order to provide personalized services to users.
② Cookies are small pieces of information sent by the server (http) operating the website to the user's computer browser, and they may be stored on the hard disk of the users' PC computers.
Purpose of Using Cookies: Cookies are used to optimize the provision of information to users by identifying the visits and usage patterns of each service and website visited by users, popular search terms, and security access status.
Installation, Operation, and Rejection of Cookies: You can refuse to store cookies through the option settings in the Tools>Internet Options>Privacy menu of your web browser.
If you refuse to store cookies, you may experience difficulties in using personalized services.
Article 9 (Personal Information Protection Manager)
① ‘Culti Labs’ oversees the tasks related to the processing of personal information, takes overall responsibility, and designates a personal information protection manager as follows to handle complaints and remedies related to the processing of personal information.
▶ Personal Information Protection Manager
Name: Park Sunha
Position: Employee
Contact: 041-674-3816
※ You will be connected to the department in charge of personal information protection.
▶ Department in Charge of Personal Information Protection
Department Name: Management Support Team
Responsible Person: Park Sunha
Contact: 041-674-3816
② Information subjects can inquire about all matters related to personal information protection, complaints, and remedies arising from the use of ‘Culti Labs’ services (or business) to the personal information protection manager and the department in charge.
‘Culti Labs’ will promptly respond to and handle inquiries from information subjects.
Article 10 (Request for Access to Personal Information)
Information subjects may request access to personal information under Article 35 of the Personal Information Protection Act to the department below. ‘Culti Labs’ will make efforts to promptly process information subjects' requests for access to personal information.
▶ Department for Receiving and Processing Requests for Access to Personal Information
Department Name: Management Support Team
Responsible Person: Park Sunha
Contact: 041-674-3816
Article 11 (Remedies for Violation of Rights)
Information subjects may inquire about remedies for violations of rights, consultation, etc., to the institutions below.
▶ Personal Information Infringement Report Center (Operated by Korea Internet & Security Agency)
- Responsibilities: Reporting of personal information infringements, Request for consultation
- Website: privacy.kisa.or.kr
- Phone: 118 (no area code needed)
- Address: 3rd Floor, Personal Information Infringement Report Center, 9 Jinheung-gil, Naju-si, Jeollanam-do, 58324, Republic of Korea
▶ Personal Information Dispute Mediation Committee
- Responsibilities: Application for personal information dispute mediation, Group dispute resolution (civil resolution)
- Website: www.kopico.go.kr
- Phone: 1833-6972 (no area code needed)
- Address: 4th Floor, Government Seoul Office, 209 Sejong-daero, Jongno-gu, Seoul, 03171, Republic of Korea
▶ Cyber Crime Investigation Department, Supreme Prosecutors' Office: 02-3480-3573 (www.spo.go.kr)
▶ Cyber Safety Bureau, Korean National Police Agency: 182 (http://cyberbureau.police.go.kr)
Article 12 (Changes to Privacy Policy)
① This Privacy Policy is effective from April 15, 2024.