<Felix Korea Co., Ltd.> (hereinafter, the
"Company") has the following policy to protect personal information
and rights of users in accordance with personal information-related laws such
as the Personal Information Protection Act. The Company’s Personal Information
Processing Policy informs you of the purpose and manner in which your personal information
is being and will be used and type measures that are being taken to protect
your personal information.
In the event that the Company revises this personal information
policy, it will make it public through its website (or individual notification)
This policy will take effect from January 1, 2021.
1. Purpose of personal information management
The Company processes personal information for the following
purposes. The processed personal data will not be used for any purpose other
than the following purposes, and if the purpose of the use is revised, it will
make it public through its website (or individual notification)
A. Membership signup and management
The Company processes personal information for the purposes of identifying and
certifying members to provide membership services, maintaining and managing
member qualifications, preventing illegal use of services, and various notices
B. Customer Inquiry
Personal information is processed for the purposes
of verifying the identity of those who submit complaints, confirming the
details of complaint, and contacting/notifying for investigating facts and
C. Provision of goods or services
Personal information is processed for the purposes of delivering goods,
providing services, contents and customized services.
D. Utilization for marketing and advertising
Personal information is processed for the purposes of developing new services
(products) and offering customized services, providing events, advertising
information and participation opportunities, identifying access frequencies, or
statistics on members' use of services etc.
Article 2. Personal information items collected
1. Personal information file name: Personal information
- Personal information
items: Email, phone number, mobile phone, affiliation, department name,
position, access log, cookie, access IP information, name of the legal
- Collection method: Webpage
- Grounds for retention:
Consent of the information subject
- Retention period: 3 years
- Relevant laws: Records on
collecting/processing of credit information: 3 years, records on handling
consumer complaints or disputes: 3 years, records on contract or subscription
withdrawal, etc.: 5 years
Article 3. Retention period of personal
① The Company manages and retains personal information within a
specific time period according to laws or as agreed by information objects when
collecting personal information.
② The period of managing and retaining each
personal information is as follows.
related to <Customer Inquiry> is retained and used for the above purpose
of use for <3 years> from the date of consent for collection.
Grounds of retention:
Consent to personal information
Relevant laws: 1) Records related
to consumer complaints or dispute handling: 3 years
2) Records related to
contract or withdrawal of subscription: 5 years
Article 4. Provision of personal information to a
In principle, the Company processes users’ personal information
within the scope of the purposes specified in Article 1, and will not process
or provide it to a third party beyond the original scope without users’ prior
① The Company shall provide personal data to a third party only in
the cases which fall under Articles 17 and 18 of the Personal Data Protection
Act, such as where a consent is obtained from the Data Subject or where special
provisions in laws so require.
② Currently, we provide personal information
to third parties as follows:
Parties to which we
provide personal information: ‘Company’
use of personal information: Name, gender, date of birth, email, mobile
phone, company phone number, affiliation, department name, position, name of
the legal representative, mobile phone number of legal representative.
Period of retention/use of
personal information provided: 3 years
Article 5. Rights
and obligations of the information principal and how to exercise these rights
Information Subject and Legal representative may exercise the following rights
related to personal information against the Company at any time:
① The Information Subject may exercise the right to access, amend,
delete, and stop processing personal information at any time for the Company.
② The exercise of ZZ rights under Paragraph 1 may be carried out
in writing or through e-mail, facsimile, etc., according to Article 41
(1) of the Enforcement Rules of the Personal Data Protection Act, and the
Company will immediately take a measure for this
③ The exercise of the rights under Paragraph 1 may be carried out
through an agent such as the Information Subject’s statutory agent or delegated
person. In this case, the power of attorney in the attached Form No. 11 of the
Enforcement Rules of the Personal Data Protection Act shall be submitted.
④ In the case of the
request for access to personal data or the request for suspension of
processing, the Information Subject’s rights may be restricted under Articles
35 (4) and 37 (2) of the Personal Information Protection Act.
⑤ The request for correction and deletion of personal information
cannot be requested if the personal information is specified as subject for
collection in other laws.
⑥ The Company verifies whether the person who has made the request
for access, the request for correction or deletion, or the request for
suspension of processing based on the Information Subject’s rights is the
Information Subject itself or its legitimate agent.
Article 6. Personal
Information Items Subject to Processing
① The Company processes the
following personal information items.
- Required items: Email,
mobile phone number, company phone number, position, department, company name,
legal representative name, legal representative mobile phone number
- Optional items:
Article 7. Destruction of personal information
In principle, the Company will destroy personal information
without delay when achieving the purpose of management of said personal
information. The procedure, period and method of destruction are as follows.
1) Destruction procedure: Information entered by users will be
moved to a separate database (in the case of paper, a separate document) after
achieving the purpose, and will be destroyed after being saved for a certain
period according to the internal policy and other relevant laws or immediately.
In this case, the personal information moved to the database will not be used
for other purposes unless specified by law.
2) Destruction period: Users’ personal information will be
destroyed within 5 days after the date when the retention period of personal
information expires or within 5 days after the date when the personal
information becomes unnecessary due to achieving the purpose of management,
closing services, terminating business etc.
3) Destruction method: Personal information printed on paper will
be destroyed by shredding with a shredder or incinerating. Information in
electronic files will be destroyed by using a technological method making
records impossible to be reclaimed.
Article 8. Matters
concerning the installation, operation and rejection of a personal information
automatic collecting device
The Company does not use a ‘cookie’ which saves information of
users and retrieves it at any time in order to provide individually customized
Article 9. Persons
in charge of personal information protection
The Company has designated a person responsible for personal
information protection and a staff member managing personal information as
below in order to protect personal information and process personal
▶Person responsible for
personal information protection
The Information Subjects
may direct all inquiries, complaints and requests for damages related to
personal information protection in using the Company’s service to the
person/department in charge. The Company will provide prompt and sufficient
answers to your inquiries.
Article 10. Change
of the personal information policy
This personal information policy shall apply from the date of
enforcement, and in case of adding, deleting or modifying the contents
according to law and policy, the Company will make it public through
notification from 7 days before such changes take effect.
Article 11. How to
seek remedy for violation of rights
In accordance with Article 29 of the Personal Information
Protection Act, the Company takes technical/administrative and physical
measures necessary to ensure safety as follows.
1. Minimization and training
of employees handling personal information We are implementing measures to
manage personal information by designating employees who handle personal
information and minimizing them by limiting them to the person in charge.
2. Technical measures against
A security program is installed and periodic updates are made to prevent
leakage and damage of personal information due to hacking or computer viruses,
and technically/physically monitored and blocked by installing systems in an
area where access is controlled from outside.
3. Encryption of personal
The user's personal information is stored and managed with an encrypted
password, so only the user can know it. For important information, a separate
security system is used, such as encrypting files and transmission data or
using a file lock function.
4. Storage of access records
and prevention of forgery
The records of access to the personal information processing system are kept
and managed for at least 6 months, and security functions are used to prevent
forgery, theft, or loss of access records.
5. Access control for
Physical storage for personal information is separately located
and established and access control procedures for operation.