exbody Co., Ltd. Privacy Policy
exbody ('http://exbody.com/' hereinafter exbody) protects personal information of information subjects in accordance with Article 30 of the 「Personal Information Protection Act」 and handles complaints related to this promptly and smoothly In order to do so, we establish and disclose the following personal information processing policy. (This privacy policy is effective from January 1, 2021)
Article 1 (Purpose of processing personal information)
exbody processes personal information for the following purposes.
Personal information being processed will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the 「Personal Information Protection Act」.
① Provision of goods or services: We process personal information for the purpose of delivering goods, providing services, sending contracts/bills, providing contents, and providing customized services.
② Utilization for marketing and advertising: Development of new services (products) and provision of customized services, provision of event and advertising information and opportunities to participate, provision of services and advertisements according to demographic characteristics, confirmation of service effectiveness, identification of access frequency, or We process personal information for the purpose of statistics on service use by members.
Personal information being processed will not be used for purposes other than the following, and if the purpose of use is changed, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the 「Personal Information Protection Act」.
① Provision of goods or services: We process personal information for the purpose of delivering goods, providing services, sending contracts/bills, providing contents, and providing customized services.
② Utilization for marketing and advertising: Development of new services (products) and provision of customized services, provision of event and advertising information and opportunities to participate, provision of services and advertisements according to demographic characteristics, confirmation of service effectiveness, identification of access frequency, or We process personal information for the purpose of statistics on service use by members.
Article 2 (Processing and Retention Period of Personal Information)
① <주식회사 엑스바디>processes and retains personal information within the period of retention and use of personal information according to the law or the period of retention and use of personal information agreed upon when collecting personal information from the information subject.
② Each personal information processing and retention period is as follows.
<재화 또는 서비스 제공>Personal information related to is collected and used from the date of consent<수집 목적 달성 후 즉시 파기>It is retained and used for the above purposes until
Retention basis: related laws and regulations
Relevant laws 1) Records on consumer complaints or dispute handling: 3 years
2) Records on payment and supply of goods: 5 years
3) Records on contract or subscription withdrawal: 5 years
4) Record on display/advertisement: 6 months
② Each personal information processing and retention period is as follows.
<재화 또는 서비스 제공>Personal information related to is collected and used from the date of consent<수집 목적 달성 후 즉시 파기>It is retained and used for the above purposes until
Retention basis: related laws and regulations
Relevant laws 1) Records on consumer complaints or dispute handling: 3 years
2) Records on payment and supply of goods: 5 years
3) Records on contract or subscription withdrawal: 5 years
4) Record on display/advertisement: 6 months
Article 3 (Rights and Obligations of Data Subjects and Legal Representatives and Methods of Exercising)
① Information subject <주식회사 엑스바디>You can exercise your rights such as viewing, correcting, deleting, and requesting suspension of processing of personal information at any time.
② The exercise of rights under Paragraph 1 <주식회사 엑스바디>In accordance with Article 41 (1) of the Enforcement Decree of the 「Personal Information Protection Act」, it can be done in writing, by e-mail, or by fax. <주식회사 엑스바디>will take action on this without delay.
③ The exercise of rights pursuant to Paragraph 1 can be done through the legal representative of the information subject or an agent such as a person who has been delegated. In this case, “Public Notice on Personal Information Processing Method (No. You must submit a power of attorney accordingly.
④ Request for viewing and suspension of processing of personal information may be restricted according to Article 35 Paragraph 4 and Article 37 Paragraph 2 of the 「Personal Information Protection Act」.
⑤ Requests for correction and deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.
⑥ <주식회사 엑스바디> Confirm whether the person who made the request, such as request for reading, correction or deletion according to the rights of the information subject, or request for suspension of processing, is the person or a legitimate agent.
② The exercise of rights under Paragraph 1 <주식회사 엑스바디>In accordance with Article 41 (1) of the Enforcement Decree of the 「Personal Information Protection Act」, it can be done in writing, by e-mail, or by fax. <주식회사 엑스바디>will take action on this without delay.
③ The exercise of rights pursuant to Paragraph 1 can be done through the legal representative of the information subject or an agent such as a person who has been delegated. In this case, “Public Notice on Personal Information Processing Method (No. You must submit a power of attorney accordingly.
④ Request for viewing and suspension of processing of personal information may be restricted according to Article 35 Paragraph 4 and Article 37 Paragraph 2 of the 「Personal Information Protection Act」.
⑤ Requests for correction and deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.
⑥ <주식회사 엑스바디> Confirm whether the person who made the request, such as request for reading, correction or deletion according to the rights of the information subject, or request for suspension of processing, is the person or a legitimate agent.
Article 4 (Preparation of items of personal information to be processed)
①<주식회사 엑스바디>handles the following personal information items.
< Provision of goods or services >
– Required items: email, mobile phone number, name
– Optional items: position, department, company name, cookie
< Provision of goods or services >
– Required items: email, mobile phone number, name
– Optional items: position, department, company name, cookie
Article 5 (Destruction of personal information)
① <주식회사 엑스바디>will destroy the personal information without delay when the personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing.
② If personal information must be kept in accordance with other laws and regulations even though the personal information retention period agreed to by the information subject has elapsed or the purpose of processing has been achieved, the personal information is moved to a separate database (DB) or stored in a storage location. otherwise preserved.
– Items of personal information to be preserved: account information, transaction date
③ The procedure and method of destroying personal information are as follows.
– Destruction procedure: <주식회사 엑스바디>selects the personal information for which the reason for destruction occurred, <주식회사 엑스바디>Personal information is destroyed with the approval of the person in charge of personal information protection.
– Destruction method
1) Information in the form of electronic files uses a technical method that cannot reproduce records.
2) Personal information printed on paper is shredded with a shredder or destroyed by incineration.
② If personal information must be kept in accordance with other laws and regulations even though the personal information retention period agreed to by the information subject has elapsed or the purpose of processing has been achieved, the personal information is moved to a separate database (DB) or stored in a storage location. otherwise preserved.
– Items of personal information to be preserved: account information, transaction date
③ The procedure and method of destroying personal information are as follows.
– Destruction procedure: <주식회사 엑스바디>selects the personal information for which the reason for destruction occurred, <주식회사 엑스바디>Personal information is destroyed with the approval of the person in charge of personal information protection.
– Destruction method
1) Information in the form of electronic files uses a technical method that cannot reproduce records.
2) Personal information printed on paper is shredded with a shredder or destroyed by incineration.
Article 6 (Measures to Ensure Safety of Personal Information)
<주식회사 엑스바디>takes the following measures to ensure the safety of personal information.
① Conducting regular self-audits: Regular self-audits are conducted to ensure the stability of handling personal information.
② Minimization and training of employees handling personal information: We are implementing measures to manage personal information by designating employees who handle personal information and limiting them to those in charge.
③ Technical measures against hacking, etc.: In order to prevent leakage and damage of personal information caused by hacking or computer viruses, etc., a security program is installed, periodically updated and inspected, the system is installed in an area where access from outside is controlled, and technical/physical Monitoring and blocking.
④ Storage of access records and prevention of forgery and alteration: Records of access to the personal information processing system are kept and managed for at least six months, and security functions are used to prevent forgery, alteration, theft, and loss of access records.
⑤ Restriction of access to personal information: Necessary measures are taken to control access to personal information by granting, changing, or canceling access rights to the database system that handles personal information, and unauthorized access from outside using the intrusion prevention system. Access is controlled.
⑥ Use of locking device for document security: Documents and auxiliary storage media containing personal information are stored in a safe place with a locking device.
⑦ Access Control for Unauthorized Persons: A separate physical storage location for storing personal information is established and an access control procedure is established and operated.
① Conducting regular self-audits: Regular self-audits are conducted to ensure the stability of handling personal information.
② Minimization and training of employees handling personal information: We are implementing measures to manage personal information by designating employees who handle personal information and limiting them to those in charge.
③ Technical measures against hacking, etc.: In order to prevent leakage and damage of personal information caused by hacking or computer viruses, etc., a security program is installed, periodically updated and inspected, the system is installed in an area where access from outside is controlled, and technical/physical Monitoring and blocking.
④ Storage of access records and prevention of forgery and alteration: Records of access to the personal information processing system are kept and managed for at least six months, and security functions are used to prevent forgery, alteration, theft, and loss of access records.
⑤ Restriction of access to personal information: Necessary measures are taken to control access to personal information by granting, changing, or canceling access rights to the database system that handles personal information, and unauthorized access from outside using the intrusion prevention system. Access is controlled.
⑥ Use of locking device for document security: Documents and auxiliary storage media containing personal information are stored in a safe place with a locking device.
⑦ Access Control for Unauthorized Persons: A separate physical storage location for storing personal information is established and an access control procedure is established and operated.
Article 7 (Matters Regarding the Installation, Operation and Rejection of Automatic Personal Information Collection Devices)
①<주식회사 엑스바디>uses 'cookies' that store and retrieve usage information from time to time in order to provide personalized services to users.
② Cookies are a small amount of information that the server (http) used to run the website sends to the user's computer browser, and is sometimes stored on the hard disk of the user's PC computer.
go. Purpose of use of cookies: It is used to provide optimized information to users by identifying the types of visits and usage of each service and website visited by the user, popular search words, security access, etc.
me. Installation/Operation and Rejection of Cookies: You can refuse to save cookies by setting options in the Tools>Internet Options>Personal Information menu at the top of the web browser.
all. If you refuse to save cookies, you may experience difficulties in using customized services.
② Cookies are a small amount of information that the server (http) used to run the website sends to the user's computer browser, and is sometimes stored on the hard disk of the user's PC computer.
go. Purpose of use of cookies: It is used to provide optimized information to users by identifying the types of visits and usage of each service and website visited by the user, popular search words, security access, etc.
me. Installation/Operation and Rejection of Cookies: You can refuse to save cookies by setting options in the Tools>Internet Options>Personal Information menu at the top of the web browser.
all. If you refuse to save cookies, you may experience difficulties in using customized services.
Article 8 (Person in charge of personal information protection)
① <주식회사 엑스바디>is responsible for overall handling of personal information, and has designated the person in charge of personal information protection as follows to handle complaints and damage relief of information subjects related to personal information processing.
– Name: Mi-sook Kim
– Position and rank: Representative
– Contact: 02-6925-6080, michelle@exbody.com
② Information subject <주식회사 엑스바디>You can ask the person in charge of personal information protection for all personal information protection related inquiries, complaint handling, damage relief, etc. that occurred while using the service (or business) of .
<주식회사 엑스바디>will respond to and process inquiries from information subjects without delay.
– Name: Mi-sook Kim
– Position and rank: Representative
– Contact: 02-6925-6080, michelle@exbody.com
② Information subject <주식회사 엑스바디>You can ask the person in charge of personal information protection for all personal information protection related inquiries, complaint handling, damage relief, etc. that occurred while using the service (or business) of .
<주식회사 엑스바디>will respond to and process inquiries from information subjects without delay.
Article 9 (Personal information access request)
The information subject may request the viewing of personal information pursuant to Article 35 of the 「Personal Information Protection Act」 to the department below, and <XBody Co., Ltd.> will make efforts to promptly process the request for reading personal information of the information subject.
Article 10 (Remedy for Infringement of Rights and Interests)
The information subject can apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee and the Personal Information Infringement Reporting Center of the Korea Internet & Security Agency in order to receive relief from personal information infringement. In addition, please contact the following organizations for reporting or consulting of other personal information infringement.
① Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
② Personal information infringement reporting center: (without area code) 118 (privacy.kisa.or.kr)
③ Supreme Prosecutor’s Office: (without area code) 1301 (www.spo.go.kr)
④ National Police Agency: (without area code) 182 (cyberbureau.police.go.kr)
In response to requests under the provisions of Article 35 (Access to Personal Information), Article 36 (Correction/Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information, etc.) of the 「Personal Information Protection Act」, the head of a public institution A person whose rights or interests have been infringed upon due to a disposition or omission may request an administrative appeal in accordance with the Administrative Appeals Act.
※ Please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr) for details on administrative adjudication.
① Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)
② Personal information infringement reporting center: (without area code) 118 (privacy.kisa.or.kr)
③ Supreme Prosecutor’s Office: (without area code) 1301 (www.spo.go.kr)
④ National Police Agency: (without area code) 182 (cyberbureau.police.go.kr)
In response to requests under the provisions of Article 35 (Access to Personal Information), Article 36 (Correction/Deletion of Personal Information), and Article 37 (Suspension of Processing of Personal Information, etc.) of the 「Personal Information Protection Act」, the head of a public institution A person whose rights or interests have been infringed upon due to a disposition or omission may request an administrative appeal in accordance with the Administrative Appeals Act.
※ Please refer to the website of the Central Administrative Appeals Commission (www.simpan.go.kr) for details on administrative adjudication.
Article 11 (Change of Privacy Policy)
This Privacy Policy is effective as of January 1, 2021.more <주식회사 엑스바디>
English 
Korean