This English translation is provided for convenience only. In the event of any discrepancy between the Korean original and this translation, the Korean version shall prevail.
<NITROS> has established the following privacy policy in accordance with the Personal Information Protection Act in order to protect the personal information, rights and interests of users and to smoothly handle users’ grievances relating to personal information.
When <NITROS> revises this Privacy Policy, it will announce the revision through a notice on its website.
1. Purposes of Processing Personal Information
<NITROS> processes personal information for the following purposes. Personal information processed will not be used for purposes other than the following, and prior consent will be obtained if the purpose of use changes.
Personal information is processed for purposes such as the provision of goods or services, provision of content, identity verification, age verification, and payment and settlement of fees.
2. Status of Personal Information Files
Personal information file name: Personal information for use of the service
Personal information items: E-mail, login ID, service usage records, access logs, cookies, payment records
Collection method: App
Basis for retention: Personal information for use of the service
Retention period: 5 years
Related laws: Records on the collection, processing and use of credit information (3 years); records on consumer complaints or dispute handling (3 years); records on payment and supply of goods, etc. (5 years)
3. Processing and Retention Period of Personal Information
① <NITROS> processes and retains personal information within the retention and use period prescribed by law or the retention and use period agreed to by the data subject when the personal information was collected.
② The processing and retention period for each item of personal information is as follows.
Personal information relating to the <provision of goods or services> is retained and used for the above purposes for 5 years from the date of consent to its collection and use.
Basis for retention: Personal information for use of the service
Related laws: Records on payment and supply of goods, etc.: 5 years
4. Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them
Users may exercise the following rights as data subjects.
① A data subject may at any time exercise rights against <NITROS>, such as requesting access to, correction of, deletion of, or suspension of processing of personal information.
② The rights under Paragraph 1 may be exercised against <NITROS> in writing, by e-mail, by fax or the like in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and <NITROS> will take action without delay.
③ The rights under Paragraph 1 may be exercised through an agent, such as the data subject’s legal representative or a person who has been delegated authority. In such case, a power of attorney in the form prescribed in Annex Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
④ Requests for access to and suspension of processing of personal information may be restricted under Article 35, Paragraph 5 and Article 37, Paragraph 2 of the Personal Information Protection Act.
⑤ Deletion of personal information may not be requested where the personal information is specified as subject to collection under other laws.
⑥ When a request for access, correction or deletion, or suspension of processing is made in accordance with the rights of the data subject, <NITROS> verifies whether the person making the request is the data subject or a legitimate agent.
5. Items of Personal Information Processed
① <NITROS> processes the following items of personal information.
<Provision of goods or services> - Required items: E-mail, login ID, service usage records, access logs, cookies, payment records
6. Destruction of Personal Information
In principle, <NITROS> destroys the relevant personal information without delay once the purpose of processing has been achieved. The procedure, timing and method of destruction are as follows.
Destruction procedure
Information entered by users is transferred to a separate database (or a separate document in the case of paper) after the purpose has been achieved, and is either stored for a certain period in accordance with internal policies and other relevant laws or destroyed immediately. Personal information transferred to the database is not used for any other purpose except as required by law.
Destruction timing
Where the retention period of personal information has expired, the personal information is destroyed within 5 days from the end of the retention period. Where personal information becomes unnecessary, such as upon achievement of the purpose of processing, discontinuation of the relevant service or closure of the business, it is destroyed within 5 days from the date on which processing of the personal information is deemed unnecessary.
Destruction method
Information in electronic file form is destroyed using a technical method that makes the records unrecoverable. Personal information printed on paper is destroyed by shredding or incineration.
7. Installation, Operation and Refusal of Automatic Personal Information Collection Devices
① <NITROS> uses cookies, which store and retrieve usage information from time to time, in order to provide individually customized services.
② A cookie is a small amount of information sent by the server (http) used to operate a website to the user’s computer browser, and may be stored on the hard disk of the user’s PC.
a. Purpose of cookies: Cookies are used to provide users with optimized information by identifying patterns of visits to and use of each service and website visited by the user, popular search terms, whether secure connections are used, and the like.
b. Installation, operation and refusal of cookies: Users may refuse the storage of cookies through the option settings in the Tools > Internet Options > Privacy menu at the top of the web browser.
c. Refusing the storage of cookies may cause difficulties in using customized services.
8. Personal Information Protection Officer
① <NITROS> has designated the following Personal Information Protection Officer to take overall responsibility for the processing of personal information and to handle data subjects’ complaints and remedies relating to the processing of personal information.
▶ Personal Information Protection Officer
Name: Wonseok Lee
Position: CEO
Title: CEO
Contact: +82 10-6323-6683, manaoneseok@gmail.com
※ You will be connected to the department in charge of personal information protection.
② Data subjects may direct all inquiries, complaints and requests for remedies relating to personal information protection that arise while using the services (or business) of <NITROS> to the Personal Information Protection Officer and the department in charge. <NITROS> will respond to and handle data subjects’ inquiries without delay.
9. Changes to the Privacy Policy
① This Privacy Policy applies from its effective date, and if there are additions, deletions or corrections to its contents in accordance with laws or policies, such changes will be announced through notices from 7 days before the changes take effect.
10. Measures to Ensure the Security of Personal Information
In accordance with Article 29 of the Personal Information Protection Act, <NITROS> takes the following technical, administrative and physical measures necessary to ensure security.
① Minimization and training of staff handling personal information
We designate the staff who handle personal information and limit them to the persons in charge, thereby minimizing their number and implementing measures to manage personal information.
② Restriction of access to personal information
We take the measures necessary to control access to personal information by granting, changing and revoking access rights to the database systems that process personal information, and we use an intrusion prevention system to control unauthorized access from outside.
③ Access control for unauthorized persons
We maintain a separate physical storage location for personal information and have established and operate access control procedures for it.