• 1. The processed personal information will not be used for any purposes other than the listed below. The personal information processing center handles the personal information for the following purposes:
  • 1-1.Purpose of Collection and Use of Personal Information
    - The subscription/inquiry information for the service
    - The name, the email address for users to send inquiry
  • 1-2.Civil Affairs Processing
    The company processes the personal information for the purpose of identifying the complaints, obtaining the contacts for investigation, and notifying the results.
  • 1-3.Providing Goods and Services
    The company processes the personal information for the purpose of providing contents, authentication, etc.
  • 1-4.Marketing and Advertising
    The company processes the personal information for the purpose of developing new services or products and providing personalized services, offering the sponsored contents and the opportunity to participate in the various events and sponsored contents, and identifying the access frequency and the statistics on the service usage.
  • 1-5.The following information may be automatically generated and collected during the process of using the service or processing the business:
    - IP Address, Cookies, web history, service usage and failure record.
    - The following information may be collected from the users of the additional services and/or customized services and participants of promotional events.
    - If the consent was given for the additional collection of personal information
• 2. Personal Information File Status
  The purpose of processing the personal information file that is registered and disclosed by the company in pursuant of Article 32 of the Personal Information Protection Act is as follows:
  - Personal Information Items: Email, name, company name
  - Collection Method: Through the webpage and information collection tool
  - Retention Period: 3 years
  - Related Law and Regulations: Retention of the records collected, processed, and utilized: 3 years
  ※ To disclose the registration details of other centers’ personal information file, please utilize the search menu of the personal information file list, such as the general support portal of the Ministry of Public Administration and Security (www.privacy.go.kr).
• 3. Personal Information Processing and Retention Period
  • 1-1.The company processes and retains personal information within the hold/use period of the personal information in accordance with laws and regulations, or the period agreed upon when collecting personal information from the subject.
  • 1-2.The processing and retention period of each personal information is as follows:
    *Reason for information holding by internal policy
    - Fraud history
    Reason for retention: Prevention of fraud
    Retention Period: Until the completion of business
    *Reason for information holding by laws and regulations
    When it is necessary to preserve the information in accordance with relevant laws and regulations, such as the Promotion of Information and Communication Network Utilization and Information Protection, etc., the company will keep the acquired information for a certain period determined by the relevant laws and regulations. In this case, the company will only use the information for the purpose that it is kept for, and the period of preservation is as follows:
    -Record of identity verification
    -Reason for preservation: Information Network Promotion and Information Protection Act
    -Retention Period: 1 year
• 4. Third Party Provision of Personal Information
  • 1-1.The company till only provide the personal information to the other third parties if they comply with Articles 17 and 18 of the Personal Information Protection Act, including the consent of the subject and special exceptions of the law.
  • 1-2.The company provides the personal information to the third parties as follows:
    Details of Personal Information Provided to Third Parties
    - Recipients of the personal information: Future Creation Science Department, Youth Entrepreneurship Foundation, Korea IT Industry Promotion Agency, and other government agencies and public institutions.
    - Purpose of the usage of the third parties: Utilize to support related projects and policy data
    - Retention Period for the third parties: The collected information is used for obtaining and confirming the information necessary for the project and kept for 3 years after the completion of business
• 5. Personal Information Processing Consignment
  • 1-1.The company handles the following personal information processing tasks for a smooth personal information processing.
    - Details of Personal Information Processing
    • i.Fiduciary:
    • ii.Details of Work: Identification of new service and product development and customized service based on the membership service
    • iii.Period of Consignment: Completion of business
  • 1-2.At the conclusion of the contract, the company shall, in accordance with Article 25 of the Personal Information Protection Act, document the matters such as prohibition of personal information processing other than the purpose of carrying out the entrusted business, technical and managerial protection measures, restriction of re-entrustment, management and supervision of the trustee, and supervise whether the trustee handles personal information securely.
  • 1-3.If the contents of the consignment service or the consignee change, we will disclose it through the personal information processing policy without delay.
• 6. The subject can exercise the following rights:
  • 1-1.The subject may exercise the following rights of privacy at any time with respect to the company.
    - Personal information request
    - Request correction of an error
    - Deletion request
    - Request to suspend the processing
  • 1-2.The exercise of the rights under Paragraph 1 may be done through written document, e-mail, fax, etc. in accordance with the Form 8 of the Enforcement Regulations of the Personal Information Protection Act.
  • 1-3.In the event where the subject requires correction or deletion of personal information, the company will not use or provide the information until the correction or deletion is completed.
  • 1-4.The exercise of rights under Section 8-1 may be done through a legal representative of the subject or an agent. In this case a power of attorney should be submitted according to Form 11 of the Enforcement Regulations of the Personal Information Protection Act.
• 7. Personal Information Items to Process
  • 1-1.The company collects the following personal information when registering for the membership to facilitate the customer consultation and other services as well.
    - Required Items: Name and e-mail address. Information of a legal representative and registration certificate required for anyone under the age of 14.
    - Optional Items: company name
    We do not collect any sensitive personal information, such as race, ethnicity, ideology, creed, hometown, political tendencies, criminal records, health information, and sex preference, which may be of concern to the user’s basic human rights.
• 8. The company will destroy personal information without delay when the purpose of processing personal information is achieved. The procedures, deadlines, and methods of destruction are as follows:
  • 1-1.The information entered by the user is transferred to a separate DB after the completion of the purpose (separate documents in the case of paper) and is stored or destroyed for a certain period of time according to internal policies and other related laws. At this time, the personal information transferred to DB will not be used for other purposes unless it is under the law.
  • 1-2.When the retention period of personal information has elapsed, the information destroyed within 5 days from the end of the retention period. In the event that personal information becomes unnecessary, such as the fulfillment of purpose of processing of personal information, the abolition of service, or termination of business, we will destroy the personal information within 5 days from the day when processing of personal information is recognized as unnecessary.
  • 1-3.Destruction Method
    For electronic files, we use a technical method that prevents the reproduction of records. Paper files are either shredded or incinerated.
• 9. In accordance with Article 29 of the Personal Information Protection Act, the Personal Information Safety Insurance Center carries out the following technical, administrative and physical measures to ensure safety.
  • 1-1.Periodic Self-Audits
    We conduct our own audits quarterly to ensure the safety of handling personal information.
  • 1-2.Limiting the number of personnel handling the personal information and proper training
    We minimize the number of employees handing the personal information.
  • 1-3.Establishing and implementing an internal management plan
    We have established and implemented an internal management plan for the safe handling of personal information.
  • 1-4.Technical measures against hacking
    The company installs security programs to prevent leakage and damage of personal information caused by hacking or computer viruses. Also, we periodically update and check the system, install the system in a restricted area, and technically and physically monitor and block them.
  • 1-5.Encryption of personal information
    User's personal information is encrypted, stored, and managed. Only the user can have access to it, and the important data may use a separate security function such as encrypting transmission data or using a file lock function.
  • 1-6.Restrict access to personal information
    We take necessary measures to control the access to personal information through granting, modifying, and deleting access rights to the database system that handles personal information. We also control unauthorized access from outside using an intrusion prevention system.
  • 1-7.Lock system for document security
    We keep documents with personal information and auxiliary storage media in safe place with locks.
• 10. Personal Information Protection Officers
  • 1-1.The company is responsible for the handling of personal information, and has designated a person responsible for the protection of personal information for the complaint handling and damage relief of the subject for the matters regarding personal information processing.
    - Personal Information Protection Officer
    Name: SeungA LEE
    Position: Manager
    Contact: seunga-lee@thewavetalk.com
  • 1-2.You may contact the person in charge of personal information protection for any personal information protection related complaints and damages remedies. The company will respond to inquiries without delay.
• 11. Change of personal information processing policy
  • 1-1.This personal information processing policy will be effective from the listed effective date. If there are additions, deletions, and corrections of the changes according to laws and policies, we will notify them through announcements 7 days before the change.

Privacy Policy Enforcement Date: June 1, 2020