Privacy Policy | CONNECTB GLOBAL

CONNECTB GLOBAL Privacy Policy

CONNECTB GLOBAL Co., Ltd. (the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea, to protect the personal information of data subjects and to handle related complaints promptly and smoothly. The Company processes only the minimum personal information necessary for the purposes of processing.

Contents

Article 1 Purposes of Processing
Article 2 Personal Information Processed
Article 3 Processing and Retention Period
Article 4 Provision to Third Parties
Article 5 Outsourcing of Processing
Article 6 Overseas Transfer of Personal Information
Article 7 Destruction Procedures and Methods
Article 8 Rights of Data Subjects and Legal Representatives
Article 9 Safety Measures
Article 10 Cookies
Article 11 Privacy Officer
Article 12 Remedies for Infringement
Article 13 Changes to this Privacy Policy

Article 1 (Purposes of Processing)

The Company processes personal information for the following purposes. Personal information is not used for any other purpose. If a purpose changes, the Company will take the necessary measures, such as obtaining separate consent under Article 18 of the Personal Information Protection Act.

Business inquiries: reviewing, consulting on and responding to inquiries
Conclusion and performance of contracts: communication with contact persons at clients and partners, contract performance and settlement
Recruitment: identifying applicants, conducting the hiring process and notifying results
Work entrusted by clients: operating clients' official social media channels and communities, running events and shipping prizes

Article 2 (Personal Information Processed)

① The Company processes the following personal information without the data subject's consent.

Business inquiries: name, company name, email address, phone number, inquiry details (Article 15(1)4 of the Personal Information Protection Act: taking measures requested by the data subject in the course of concluding a contract)
Conclusion and performance of contracts: contact person's name, organization, title, email address, phone number (Article 15(1)4 and 6 of the Act: performance of contracts and the Company's legitimate interests)
Recruitment: name, email address, phone number, education and career history stated in résumés and portfolios (Article 15(1)4 of the Act: taking measures requested by the data subject in the course of concluding an employment contract)

② The Company currently does not process any personal information based on the data subject's consent.

③ Personal information that the Company processes on behalf of clients consists of the items defined in the outsourcing contract, namely social media account IDs, nicknames, content of posts, comments and messages, and event winners' names, addresses, phone numbers and email addresses. It is processed under the client's (the controller's) legal basis and the outsourcing contract.

④ The Company does not process unique identification information or sensitive information.

Article 3 (Processing and Retention Period)

The Company destroys personal information without delay once the purpose of processing has been achieved. However, the following information is retained for the periods stated below.

Business inquiries: 1 year after the inquiry is resolved
Contract records: contact persons' names, organizations and phone numbers stated in contracts and tax invoices are retained for 5 years after the contract ends (Article 85-3 of the Framework Act on National Taxes)
Recruitment: 180 days after the hiring decision is finalized
Entrusted work: the period defined in the outsourcing contract

Article 4 (Provision to Third Parties)

The Company provides personal information to third parties only in cases falling under Articles 17 and 18 of the Personal Information Protection Act, such as with the data subject's consent or under special provisions of law. The Company currently does not provide personal information to any third party.

Article 5 (Outsourcing of Processing)

The Company currently does not outsource any personal information processing.

If the Company outsources processing in the future, it will specify in writing, in accordance with Article 26 of the Personal Information Protection Act, the prohibition of processing beyond the purpose of the outsourced work, safety measures, restrictions on re-outsourcing, management and supervision of the processor, and liability such as compensation for damages, supervise whether the processor handles personal information securely, and disclose the outsourced work and the processor through this Privacy Policy.

The Company does not re-outsource the processing of personal information entrusted to it by clients to any other party.

Article 6 (Overseas Transfer of Personal Information)

The Company transfers and stores personal information overseas as follows for its use of business cloud services. The legal basis is Article 28-8(1)3(a) of the Personal Information Protection Act.

Storage service provider: Google LLC (Google Workspace, googlekrsupport@google.com)
Storage countries: countries where Google data centers are located, namely the United States, Chile, Uruguay, Ireland, the Netherlands, Denmark, Finland, Germany, Belgium, the United Kingdom, Taiwan, Japan and Singapore
Items stored: personal information contained in business emails and documents
Time and method of storage: transmitted over information and communications networks when the service is used
Purpose and storage period: storing business emails and documents, for the retention periods in Article 3

Data subjects may refuse the overseas transfer of their personal information by contacting the Privacy Officer. However, refusing may limit responses to inquiries and contract performance.

Article 7 (Destruction Procedures and Methods)

① The Company destroys personal information without delay when the retention period expires or the purpose of processing has been achieved.

② Personal information that must be retained under other laws is stored separately from other personal information. The items, legal basis and period of retention are set out in Article 3.

③ Destruction procedure: the Company identifies personal information for which a reason for destruction has arisen and destroys it.

④ Destruction method: electronic files are permanently deleted using methods that prevent recovery or reproduction, and paper documents are shredded or incinerated.

Article 8 (Rights of Data Subjects and Legal Representatives)

Data subjects may at any time exercise their rights to access, correct, delete or suspend the processing of their personal information, and to withdraw consent.

Requests may be made to the Privacy Officer in writing or by email. The Company will act on such requests without delay.

Rights may be exercised through a representative, such as a legal representative or a person with delegated authority, in which case a power of attorney must be submitted.

Article 9 (Safety Measures)

Administrative measures: establishing and implementing an internal management plan, regular employee training
Technical measures: access control, encryption of personal information, installation and updating of security software
Physical measures: access control for data storage areas

Article 10 (Cookies)

The Company's website uses cookies for website operation, and the Company does not identify specific individuals through cookies. Data subjects may refuse or delete cookies through their web browser settings. However, refusing cookies may make some website features difficult to use.

Article 11 (Privacy Officer)

The Company has designated the following Privacy Officer, who is responsible for overseeing personal information processing and for handling complaints and remedies from data subjects.

Name: Daril Kim (김대열)
Title: CEO
Email: daril.kim@connectbglobal.com
Phone: +82-70-7537-0993

Article 12 (Remedies for Infringement)

Data subjects may apply to the following organizations for dispute resolution or consultation regarding infringement of personal information.

Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
Korean National Police Agency: 182 (ecrm.police.go.kr)

Article 13 (Changes to this Privacy Policy)

This Privacy Policy takes effect on January 1, 2025. It is the first version of the policy, and there is no previous privacy policy. Any additions, deletions or modifications will be announced on the website.

This Privacy Policy has been translated from the Korean original. In the event of any discrepancy, the Korean version prevails.