As Revised: July 16, 2023
Article 1 General Provisions
Essential items necessary to provide the service are collected under the consent of the user. Personal information is information about a living individual, and refers to information that can identify the individual by the name, resident registration number, etc. included in the information.
The company treats users' personal information with care, and complies with the Protection of Communications Secrets Act, the Telecommunications Business Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, and the 『Personal Information Protection Guidelines』 established by the Korea Communications Commission.
The company is doing its best to protect the rights and interests of users through the personal information handling policy in accordance with the relevant laws and regulations.
Article 2 Items of Personal Information Collected
When signing up for membership, the company collects only the minimum amount of personal information necessary to provide services. Items collected include:
When signing up
Collected directly when signing up for membership: e-mail (ID), password
Collection by third parties when logging in to social (Google/Line/Apple/Kakao/Facebook): name (or nickname), e-mail (ID), profile picture
– When collecting personal information of children under the age of 14, confirm the consent of the legal representative, verify identity when exercising the rights of the legal representative
Profile items entered by the user after signing up
Name, photo and phone number. The phone number is only used for automatic friend search and is not exposed.
Automatically generated information for service use and user protection
Last access time, location information, IP address, advertising identifier, device identifier, device type, e-mail information in the address book to find friends (location information is not exposed to anyone other than the user specified by the user)
In order to deny automatically collected information, if you reject the corresponding permission request (address book search, location information search), it will not be collected. In order to upload a profile picture, access to camera and photo/media is required, and if you do not want it, you can reject the permission request. In order to use the radio function, permission for audio is required, and if you do not want it, you can reject the permission request.
Article 3 Consent to Collection and Use of Personal Information
The company obtains the member's consent to the collection and use of personal information. In relation to the collection of personal information of members, when signing up as a member, a procedure for consent to the personal information handling policy is prepared, and clicking the consent button is deemed to have agreed to the collection and use of personal information. However, in the following cases, prior consent from members for the collection and use of personal information may not be sought.
Personal information necessary to fulfill a contract for the provision of information and communication services, where it is clearly difficult to obtain normal consent due to economic and technical reasons
When it is necessary for the settlement of charges according to the provision of information and communication services
When there are special provisions in other laws
Article 4 Purpose of Collection and Use of Personal Information
Fulfillment of contracts on service provision and implementation of service functions
Member management and user protection. Identification, personal identification, complaint handling, complaint handling, delivery of notices, prevention and blocking of fraudulent use by bad members.
New service development and marketing, use in advertising
Business alliance with customized advertising company
Article 5 Provision of personal information
In any case, except with the consent of the member or in accordance with the provisions of the law, the company uses the personal information of the member beyond the scope notified in [Purpose of collection and use of personal information] or informs others or other companies/organizations. Doesn't provide.
In the case of providing personal information of a member, the person to whom the personal information is provided, the purpose of using the personal information of the person to whom the personal information is provided, the items of personal information provided, and the period of retention and use of the personal information of the person to whom the personal information is provided are individually disclosed on the Internet. We seek prior consent after notifying you through the website, e-mail, writing, or phone. However, in the following cases, personal information may be provided without the member's consent.
When it is necessary to settle charges for service provision
In the case of providing a form in which individuals cannot be identified for statistical writing, academic research, or market research
When there are special provisions in the law
In order to improve the quality of services provided to members, the company may form partnerships with professional content providers or business operators in various fields for the purpose of providing various services such as customized services, online advertising services, statistical writing or market research.
The company currently provides your personal information to the following companies.
Transferee’s personal information transfer date and method Items of transferred personal information Purpose of use of transferee’s personal information Transferee’s retention period
United States - unspecified sunwhereareyou
Previous location information, IP address, advertising identifier, device identifier online while running
Offer personalized advertising
customer analysis
Market research and research
Until the purpose of use of personal information is achieved
Article 6 Rights of users and legal representatives and how to exercise them
Users can view their personal information at any time at ‘SunWhereAreYou > Profile’.
Users may withdraw their consent to the collection and use of personal information at any time by ‘membership withdrawal’, etc.
In the case of children under the age of 14, the legal representative has the right to view or modify the child's personal information, and the right to withdraw consent to collection and use.
Article 7 Withdrawal of Consent to Collection, Use and Provision of Personal Information
Members can withdraw their consent to the collection, use and provision of personal information at any time. “Clear my account”. All information can be deleted by pressing the inquiry button. You cannot sign up for the same account again.
Article 8 Retention period and use period of personal information
The company continues to retain the personal information provided by the member to the company as long as the member maintains membership.
If you withdraw your consent to provide personal information (withdrawal from membership), the collected personal information will be immediately destroyed and will not be used for any purpose except for exceptions.
Article 9 Automatic collection device, operation, and refusal of personal information
Companies may collect ADID/IDFA. ADID (Android OS)/IDFA (iOS) is a mobile app user's advertisement identification value, which can be collected for measurement to provide customized services for users or to provide advertisements in a better environment.
Rejection method
Android: Settings > Google (Google Settings) > Advertising > Opt out of Ads Personalization
iOS: Settings > Privacy > Advertising > Limit Ad Tracking
Article 10 Personal information destruction procedure and method
The company notifies the member in advance and destroys it without delay when the purpose of collection and use of the consented personal information is achieved. The destruction procedure and method are as follows.
Destruction procedure
When the purpose of collection and use is achieved, the personal information entered by the member is transferred to a separate DB and stored for a certain period of time in accordance with Article 9 in accordance with internal policies and other related laws and regulations, and then destroyed in a non-recoverable way.
Members' personal information transferred to a separate DB is not used for any purpose other than in accordance with the law.
Destruction method
Personal information stored in the form of electronic files is deleted using a technical method that cannot reproduce the record.
Personal information printed on paper is shredded with a shredder or destroyed by incineration.
Article 11 Technical and managerial measures for personal information protection
The company is taking the following technical and managerial measures to prevent personal information from being lost, stolen, leaked, falsified, or damaged in handling personal information of members.
technical measures
The member's password is encrypted so that even the operator cannot know the member's individual password.
It is impossible to access the server containing personal information if it is not the company's internal network by giving access to unauthorized IPs. In addition, we are committed to system security, such as prohibiting access to unauthorized ports.
We adopt a security device (SSL) that can safely transmit personal information on the network by using a password algorithm when logging in.
All personal information, including location information, is transmitted and received after being encrypted.
Administrative measures
We set up a department consisting of a personal information manager and a minimum number of personnel to limit access to personal information.
The transfer of duties of personal information handlers is thoroughly carried out while security is maintained, and responsibility for personal information accidents after entering or leaving the company is clearly established. However, if personal information is accidentally leaked by a member, the company is liable You must manage your ID and password so that they are not known to others.
Article 12 Contact information of the person in charge of personal information management and the person in charge
Affiliation: ViolinMuseuM
Contact: +82 01098119170 Customer Center