Privacy Policy

In accordance with the Personal Information Protection Act, AICU Co., Ltd. (hereinafter "AICU") discloses the following information regarding the collection of personal information items, purpose of collection and use, retention and use period, right to refuse consent, and disadvantages of refusing consent for those who apply for membership.

Article 1 (Purpose of Collection and Use of Personal Information)

■ AICU collects and uses personal information only for the following purposes.

• Member management including verification of membership registration intent and user identification
• Analysis of service usage records and access frequency, statistics on service usage, etc.

Article 2 (Items of Personal Information to be Collected)

■ AICU collects minimum personal information necessary when users wish to use the service.

■ The personal information collected from users at the time of membership registration is as follows.

• During membership registration, authentication through SNS authentication methods such as Google login is required, and "email, name" are collected as mandatory items.
• Service usage records and device information may be generated and collected during the service use process.

Article 3 (Retention and Use Period of Personal Information)

■ AICU immediately destroys personal information collected upon termination of service use, such as membership withdrawal.

Article 4 (Provision of Personal Information to Third Parties)

■ AICU does not provide personal information to third parties without the prior consent of the information subject. However, personal information may be provided to third parties only in cases falling under Article 17 of the Personal Information Protection Act, such as when there are special provisions in laws or when it is unavoidable to comply with legal obligations.

Article 5 (Possibility of Sensitive Information Disclosure and Methods for Choosing Non-disclosure)

■ AICU does not disclose sensitive information that may pose a risk of privacy invasion in the process of providing services.

Article 6 (Outsourcing of Personal Information Processing)

■ AICU outsources personal information processing as follows for smooth personal information business processing.

• Recipient (Processor): Google LLC
• Purpose of Outsourcing: Data storage and infrastructure management using Google Firebase

■ When concluding outsourcing contracts, AICU specifies matters such as prohibition of personal information processing outside the purpose of performing outsourced tasks, technical and managerial protection measures, restrictions on re-outsourcing, management and supervision of processors, and liability for damages in documents such as contracts in accordance with Article 26 of the Personal Information Protection Act, and supervises whether processors handle personal information safely.

■ If there are any changes in the content of outsourced tasks or processors, we will promptly disclose them through this privacy policy.

Article 7 (International Transfer of Personal Information)

■ Not applicable

Article 8 (Destruction of Personal Information)

■ AICU destroys personal information without delay when it becomes unnecessary due to the expiration of the retention period or achievement of processing purposes.

■ If personal information must continue to be preserved in accordance with other laws despite the expiration of the agreed retention period or achievement of processing purposes, such personal information will be moved to a separate database (DB) or stored in a different location.

■ The procedures and methods for destroying personal information are as follows.

• Destruction Procedure

  Personal information subject to destruction is selected and destroyed with the approval of the personal information protection officer.

• Destruction Method

  Personal information recorded and stored in electronic file format is destroyed using technical methods that prevent reproduction of records, and personal information recorded and stored on paper documents is destroyed by shredding or incineration.

Article 9 (Rights and Obligations of Information Subjects and Methods of Exercise)

■ Information subjects may exercise the following personal information protection rights against AICU at any time.

• Request for access to personal information
• Request for correction in case of errors
• Request for deletion
• Request for processing suspension

■ Rights can be exercised through written or email communication to AICU, and AICU will take action without delay. Additionally, when requesting access, correction/deletion, or processing suspension of rights according to information subject rights, AICU verifies whether the person requesting access is the subject themselves or a legitimate representative.

■ When an information subject requests correction or deletion of errors in personal information, AICU will not use or provide such personal information until the correction or deletion is completed.

■ Rights can be exercised through a legal representative or delegated representative of the information subject. In this case, a power of attorney according to Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.

■ Information subjects must not violate the Personal Information Protection Act and other relevant laws or infringe upon the personal information and privacy of themselves or others being processed by AICU.

■ Requests for access to and suspension of processing of personal information may be restricted according to Article 35, Paragraph 4 or Article 37, Paragraph 2 of the Personal Information Protection Act.

■ If personal information is specified as a collection target in other laws, it may not be deleted even if deletion is requested.

Article 10 (Security Measures for Personal Information)

■ AICU takes the following measures to ensure the security of personal information in accordance with Article 29 of the Personal Information Protection Act.

• Administrative Measures: Establishment and implementation of internal management plans, regular employee training, etc.
• Technical Measures: Access control for personal information processing systems, encryption of personal information, installation of security programs
• Physical Measures: Locking and access control of locations where personal information is stored and maintained

Article 11 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)

■ AICU uses 'cookies' that store and frequently retrieve usage information to provide individualized customized services to users and operate the website securely.

■ Cookies are small pieces of information sent by the server (http) operating the website to users' computer browsers and may be stored on users' PC hard drives.

Purpose of Cookie Use: Used to understand visit and usage patterns, security access status, etc., of services and websites visited by users to provide optimized information.

Cookie Installation, Operation, and Rejection: Cookie storage can be rejected through option settings in the [Tools]>[Internet Options]>[Privacy] menu at the top of web browsers.

Users will not experience any difficulties or disadvantages in using the website even if they reject cookie storage.

Article 12 (Personal Information Protection Officer)

■ AICU designates a personal information protection officer as follows to oversee personal information processing tasks and handle complaints and damage relief related to personal information processing.

• Personal Information Protection Officer
  • Name: Eunah Hwang
  • Position: CEO
  • Email: aicu.contact@gmail.com

■ Information subjects can inquire about all personal information protection-related matters, complaints, and damage relief that arise while using AICU's services with the personal information protection officer. AICU will respond to and handle information subjects' inquiries without delay.

Article 13 (Criteria for Additional Use or Provision Without Information Subject's Consent)

■ Whether there is relevance to the original collection purpose

■ Whether additional use or provision of personal information is predictable considering the circumstances of collection or processing practices

■ Whether it unfairly infringes on the interests of the information subject

■ Whether necessary security measures such as pseudonymization or encryption have been taken

Article 14 (Rights Infringement Relief Methods)

■ Users can contact not only AICU's personal information protection department but also the following institutions for reporting or consultation regarding personal information infringement.

• Personal Information Dispute Mediation Committee (www.kopico.go.kr/(No area code) 1833-6972)
• Personal Information Infringement Report Center (privacy.kisa.or.kr/(No area code) 118)
• Supreme Prosecutors' Office Cybercrime Investigation Division (www.spo.go.kr/(No area code) 1301)
• National Police Agency Cyber Security Bureau (cyberbureau.police.go.kr/(No area code) 182)