Privacy Policy

1. Introduction

Beesknees (hereinafter referred to as the "Company") uses the Beeskit service (hereinafter referred to as the "Service") that the Company intends to provide In order to protect the information of an individual (hereinafter referred to as "user" or "individual") (hereinafter referred to as "personal information"), the Personal Information Protection Act, the Act on Promotion of Information and Communication Network Utilization, Information Protection, etc. (hereinafter referred to as the "Information and Communication Network Act") In order to comply with the laws and regulations and to promptly and smoothly deal with the difficulties related to the protection of personal information of service users, we establish a personal information processing policy (hereinafter referred to as "the main policy") as follows.

2. Principle of Processing Personal Information

In accordance with the laws and regulations related to personal information and this policy, the company may collect the user's personal information, and the collected personal information may be provided to a third party only with the consent of the individual. Provided, That in accordance with the provisions of laws and regulations, etc If enforced, the company may provide the collected user's personal information to a third party without prior personal consent.

3. Disclosure of this Policy

The company is releasing this policy through the first screen of the company's website or the connection screen with the first screen so that users can easily check this policy at any time.
When the company discloses this policy pursuant to paragraph (1), it will use the font size, color, etc. so that users can easily check this policy.

4. Modification of this Policy

This policy may be amended in accordance with laws, guidelines, notices, or changes in the policies or contents of the government or company services related to personal information.
When the company revises this policy pursuant to paragraph (1), it shall notify it by one or more of the following methods.
1. How to announce the notice in the notice section on the first screen of the company's Internet homepage or through a separate window
2. How to notify users in writing, imitation, e-mail, or similar ways.
The company shall notify at least 7 days before the date of enforcement of the revision of this policy: Provided, That if there is a significant change in user rights, it shall be notified at least 30 days in advance.

5. Information for Membership

The company collects the following information for users to sign up for membership in the company service.

Required: Email Address
Optional: Name, Mobile Phone Number

6. Information for Payment Services

The company collects the following information to provide users with the company's payment services.

Required: Card number, card password, and expiration date

7. Information for Service Use and Fraudulent Use)

The company collects the following information for statistical and analysis and confirmation and analysis of fraudulent use according to the user's use of the service. (The term "fraudulent use" means that the company repeatedly re-subscribe after withdrawing from the membership and cancel the purchase after purchasing the product It refers to the act of illegally or conveniently receiving economic benefits such as discount coupons and event benefits provided, the act prohibited by the terms and conditions of use, and the act of illegal or expedient acts such as theft of names.)

Required: Service usage records, cookies, access information, and device information

8. How to Collect Personal Information

The company collects users' personal information in the following ways:

The way users enter their personal information on the company's homepage
The way users enter their personal information through services other than the company's homepage, such as applications

9. Use of Personal Information

The Company shall use its personal information in any of the following cases:

If it is necessary for the operation of the company, such as delivery of notifications,
For service improvement for users, such as replying to inquiries and handling complaints,
For providing the company's services
For the prevention and sanctions of acts that interfere with the smooth operation of services, including restrictions on the use of members who violate laws and company terms and conditions, and fraudulent use of services
For new service development
For marketing, such as event and event guidance,
For demographic analysis, service visits, and analysis of usage records

10. Period of Retention and Use of Personal Information

Company holds and uses personal information about users during the period to achieve the purpose of collecting and using personal information.
Despite the preceding paragraph, the company keeps records of fraudulent use of services for up to one year from the time of membership withdrawal in order to prevent fraudulent subscription and use.

11. Period of Retention and Use of Personal Information Under the Act

The company holds and uses personal information in accordance with relevant laws and regulations as follows.

Retention information and retention period under the Consumer Protection Act in Electronic Commerce, etc
1. Records on withdrawal of contracts or subscriptions: 5 years
2. Records on payment and supply of goods, etc.: 5 years
3. Records on consumer complaints or disputes: 3 years
4. Displayed and advertised records: 6 months
Retention information and retention period under the Communications Secret Protection Act
1. Web log data: 3 months
Retention information and retention period under the Electronic Financial Transactions Act
1. Records on electronic financial transactions: 5 years
Act on the Protection and Use of Location Information
1. Records on personal location information: 6 months

12. Principle of Destruction of Personal Information

In principle, if personal information is not necessary, such as achieving the purpose of processing the user's personal information and the expiration of the retention and use period, the company will destroy the information without delay.

13. Procedures for Destroying Personal Information)

The information entered by the user for membership registration, etc. is transferred to a separate DB after the purpose of processing personal information is achieved (a separate document box in the case of paper) and is stored for a certain period of time according to the internal policy and other related laws and regulations (refer to the retention and use period) and destroyed.
The company destroys the personal information that has caused the reason for destruction through the approval procedure of the person in charge of personal information protection.

14. How to Destroy Personal Information

The company deletes personal information stored in electronic file format using a technical method that cannot be reproduced, and destroys personal information printed on paper through a shredder or incineration.

15. Measures to Transmit Advertising Information)

When the company transmits advertising information for commercial purposes using an electronic transmission medium, it obtains explicit prior consent from the user. However, prior consent is not obtained in any of the following cases
1. If the company collects contact information directly from the recipient through the transaction relationship of goods, etc., and if the company intends to transmit advertising information for commercial purposes for goods, etc. of the same kind as the company's processing and transaction with the recipient within six months from the date the transaction ends.
2. Where a telephone solicitor under the Door-to-Door Sales, etc. Act notifies the recipient of the source of personal information collection and makes a telephone solicitation.
Notwithstanding the preceding paragraph, if the recipient expresses his intention to refuse to receive or withdraws his/her prior consent, the company does not transmit commercial information for profit and notifies the result of the rejection and withdrawal of consent.
Notwithstanding paragraph (1), the company shall obtain separate prior consent from the recipient when transmitting commercial information for commercial purposes using an electronic transmission medium at the time from 9 p.m. to 8 a.m. the following day.
When the company transmits advertising information for commercial purposes using electronic transmission media, the following matters shall be specifically disclosed in the advertising information.
1. Company name and contact information
2. Indication of matters concerning the declaration of refusal to receive or withdrawal of consent to receive
The company shall not take any of the following measures when transmitting advertising information for commercial purposes using electronic transmission media.
1. Measures to avoid and obstruct the rejection or withdrawal of consent from the recipient of advertising information.
2. Measures to automatically create the recipient's contact information, such as phone number and e-mail address, by combining numbers, codes, or characters.
3. Measures to automatically register a phone number or e-mail address for the purpose of transmitting advertising information for commercial purposes
4. Various measures to hide the identity of the advertisement information sender or the source of advertisement transmission
5. Various measures to induce a reply by deceiving the recipient for the purpose of transmitting advertising information for commercial purposes

16. Protection of Children's Personal Information

The company allows membership registration only for users over the age of 14 to protect the personal information of children under the age of 14.

17. Withdrawal of Consent to Inquire and Collect Personal Information)

Users and legal representatives may inquire or modify their registered personal information at any time and may request withdrawal of consent to collect personal information.
If users and legal representatives want to withdraw their consent to collect their subscription information, contact the person in charge of personal information protection or the person in charge by writing, phone or e-mail address, the company will take action without delay.

18. Change of Personal Information, Etc.

Users can request the company to correct errors in personal information through the method in the preceding Article.
In the case of the preceding paragraph, the company does not use or provide personal information until the correction of personal information is completed, and if the wrong personal information has already been provided to a third party, the correction processing result will be notified to the third party without delay for correction.

19. User's Duties

Users should keep their personal information up to date, and the user himself is responsible for the problems caused by the user's incorrect information input.
Membership registration that steals other people's personal information may result in loss of user qualification or punishment under relevant privacy laws.
Users are responsible for maintaining the security of their e-mail addresses, passwords, etc., and cannot transfer or lend them to third parties.

20. Company's Personal Information Management

The company is taking necessary technical and administrative protection measures to ensure safety so that personal information is not lost, stolen, leaked, tampered with, or damaged in processing the user's personal information.

21. Processing of Deleted Information

The company processes personal information canceled or deleted at the request of the user or legal representative as specified in the "Period of Retention and Use of Personal Information" collected by the company and prevents it from being viewed or used for other purposes.

22. Password Encryption

The user's password is stored and managed by one-way encryption, and personal information can only be confirmed and changed by the person who knows the password.

23. Measures Against Hacking, Etc.

The company is doing its best to prevent users' personal information from being leaked or damaged by intrusion into information and communication networks such as hacking and computer viruses.
The company uses the latest vaccine program to prevent leakage or damage of users' personal information or data.
Company is doing its best to ensure security using an intrusion prevention system just in case.
The company makes it possible to safely transmit sensitive personal information (if you collect and hold it) on the network through encryption communication, etc.

24. Minimization of Personal Information Processing, Trainings

The company limits the number of people in charge of handling personal information to a minimum, and emphasizes compliance with laws and internal policies through administrative measures such as training for personal information controllers.

25. Actions Against Personal Information Leakage, Etc.

When the company becomes aware of the loss, theft, or leakage of personal information (hereinafter referred to as "leakage, etc."), it shall notify the relevant user of all of the following matters without delay and report them to the Korea Communications Commission or the Korea Internet & Security Agency.

Personal information items that have been leaked
When the leak occurred
Actions that users can take
Response measures of information and communication service providers, etc.
Department and contact information for users to receive counseling, etc.

26. Exception of Actions for Personal Information Leakage, Etc.

If there is a legitimate reason, such as not knowing the user's contact information despite the provision of the provision, the company may take measures to replace the notice of the provision by posting it on the company's website for more than 30 days.

27. Protection of Personal Information Transferred to Foreign Countries

The company does not enter into an international contract containing matters concerning users' personal information that violate related laws such as the Personal Information Protection Act.
The company obtains the user's consent to provide the user's personal information abroad (including inquiries) and entrust processing and storage (hereinafter referred to as "transfer"). Provided, That if all of the matters referred to in the subparagraphs of paragraph (3) of this Article are disclosed in accordance with relevant laws and regulations such as the Personal Information Protection Act or notified to the user by means prescribed by Presidential Decree, such as electronic mail, they may not go through the consent procedure for processing and storage of personal information.
In order to obtain consent pursuant to the main text of Paragraph 2 of this Article, the Company shall notify the user of all of the following matters in advance.
1. Transferred Personal Information Item
2. The country in which personal information is transferred, the date and time of transfer and the method of transfer
3. The name of the person receiving the personal information (referring to the name and contact information of the information management officer if it is a corporation)
4. The purpose of use of personal information and the period of possession and use of personal information of the person receiving the personal information
The company shall take protective measures in accordance with relevant laws and regulations, such as the Personal Information Protection Act and the Presidential Decree, when transferring personal information abroad with the consent under the main sentence of paragraph 2 of this Article.

28. Matters Concerning the Installation, Operation, and Rejection of Automatic Personal Information Collection Devices

The company uses an automatic personal information collection device (hereinafter referred to as "cookie") that stores and fetches usage information from time to time to provide users with individual customized services. Cookies are a small amount of information sent by servers (https) used to operate websites to users' web browsers (including PCs and mobiles) and are sometimes stored in users' storage spaces.
The user has the option to install cookies, so they can allow all cookies by setting options in the web browser, check each time they are saved, or refuse to save all cookies.
However, if you refuse to save your cookies, some of the company's services that require login may be difficult to use.

29. How to Specify Allow Cookie Installation

You can set the settings for Allow Cookies, Block Cookies, etc. by setting Web browser options.

Edge: Settings menu at the top right of the Web browser > Cookies and Sites Permissions > Manage and Delete Cookies and Sites Data
Chrome: Settings menu at the top right of Web browser > Privacy and Security > Cookie and other site data
Whale: Settings menu at the top right of the web browser > Privacy > Cookie and other site data

30. Designation of the Company's Personal Information Protection Officer

In order to protect users' personal information and to deal with complaints related to personal information, the company designates relevant departments and privacy officers as follows.

Privacy Director

Name: Choe Yoon-seop
Position: Representative
Email: sysop@beesk.it

31. Method of Remedy for Infringement of Rights and Interests

In order to receive relief due to personal information infringement, the data subject may apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Reporting Center of the Korea Internet & Security Agency, etc. For other reports and counseling of personal information infringement, please contact the following agencies.
1. Personal Information Dispute Mediation Committee: (+82) 1833-6972 (www.kopico.go.kr)
2. Personal Information Infringement Reporting Center: (+82) 118 (privacy.kisa.or.kr)
3. Supreme Prosecutor's Office: (+82) 1301 (www.spo.go.kr)
4. Police Agency: (+82) 182 (ecrm.cyber.go.kr)
The company guarantees the data subject's right to self-determination of personal information, strives to provide counseling and relief for damage caused by personal information infringement, and if you need to report or consult, please contact the department in charge of paragraph (1).
A person who has been infringed on rights or interests due to a disposition or omission made by the head of a public institution against a request under Articles 35 (reading personal information), 36 (correction and deletion of personal information), and 37 (suspension of processing of personal information) of the Personal Information Protection Act may request an administrative trial as prescribed by the Administrative Trial Act.
1. Central Administrative Appeals Committee: (+82) 110 (www.simpan.go.kr)

Supplementary Provisions

1. Enforcement Date

This policy comes into effect from March 29, 2024.