Privacy Policy

azoo Privacy Policy

 

Cubic Co., Ltd. (hereinafter “Company”) protects the personal information of users (hereinafter “Users”) who wish to use the services and detailed sub-services (hereinafter “Services”) of “azoo”, a data brokerage platform, in accordance with the Personal Information Protection Act. We value your rights and interests and have established and are operating the following personal information processing policy to promptly handle related grievances and difficulties. The company is making its best efforts to comply with and implement the responsibilities and obligations stipulated in relevant laws and regulations.

 

Article 1 ( Personal Information Collection and Usage Status )

1) The company collects the minimum amount of personal information through the following collection methods for membership registration, provision of various services, and customer consultation.

 

< Domestic : Individual Members>

Collection Method

Category

Items Collected

Purpose of Collection

Retention and Use Period

Membership RegistrationMandatoryName, Phone number, ID, Password, EmailIdentity verification and consent for registration, Membership management, Various service provision, Personalized notifications, Participation in events, etc.

Until membership withdrawal

Or until agreement withdrawal

Paid service usageMandatory

For credit card payment: Card issuer name, Card number, etc.

For bank transfer: Account holder name, Bank name, Account number, etc.

Purchase and usage of paid services

Until service purchase completion

 

※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period.

My Page > Account InformationOptional(Account Holder) Account holder name, Bank name, Account numberRefund, Settlement

Until refund and settlement completion

 

※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period.

 

< Domestic : Corporate/Institutional Members >

Collection Method

Category

Items Collected

Purpose of Collection

Retention and Use Period

Membership Registration (Responsible Party)MandatoryContact Person's Name, Phone Number, ID, Password, EmailIdentity verification and consent for registration, Membership management, Provision of various services, Personalized notifications, Participation in events, etc.

Until membership withdrawal

Or until agreement withdrawal

Membership Registration (Corporate/Institution)MandatoryCompany (Institution) Name, Business Address (Institution Address), Company (Institution) Website, Business Registration Number (Institution Unique Number), Business (Institution) Registration Certificate, (Institution) Representative NameMembership management

Until membership withdrawal

Or until agreement withdrawal

Membership Registration (Corporate)OptionalContact Person's Department Name, Contact Person's Title/PositionMembership Management

Until membership withdrawal

Or until agreement withdrawal

Paid service usageMandatory

For credit card payment: Card issuer name, Card number, etc.

For bank transfer: Account holder name, Bank name, Account number, etc.

Purchase and usage of paid services

Until service purchase completion

 

※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period.

My Page > Account InformationOptional(Corporate/Institution) Account holder name, Bank name, Account numberRefund, Settlement

Until refund and settlement completion

 

※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period.

 

< Overseas : Individual Members >

Collection Method

Category

Items Collected

Purpose of Collection

Retention and Use Period

Membership RegistrationMandatory

Name, Phone number, ID, Password, Email

 

Country affiliation information, Date of birth

Identity verification and consent for registration, Membership management, Provision of various services, Personalized notifications, Participation in events, etc.

Until membership withdrawal

Or until agreement withdrawal

Paid service usageMandatoryFor overseas credit card payment: Card issuer name, Card number, etc.Purchase and usage of paid services

Until service purchase completion

 

※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period.

My Page > Account InformationOptional(Member) Account holder name, Bank name, Account numberRefund, Settlement

Until refund and settlement completion

 

※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period.

 

< Overseas : Corporate/Institutional Members >

Collection Method

Category

Items Collected

Purpose of Collection

Retention and Use Period

Membership Registration (Responsible Party)Mandatory

Contact person's name, Phone number, ID, Password, Email

 

Contact person's date of birth

Identity verification and consent for registration, Membership management, Provision of various services, Personalized notifications, Participation in events, etc.

Until membership withdrawal

Or until agreement withdrawal

Membership Registration (Corporate/Institution)Mandatory

Company (Institution) Name, Business Address (Institution Address), Company (Institution) Website, Business Registration Number (Institution Unique Number), Business (Institution) Registration Certificate, (Institution) Representative Name

 

Country affiliation information, (Institution) Representative ID card

Membership Management

Until membership withdrawal

Or until agreement withdrawal

Membership Registration (Corporate)OptionalContact person's department name, Contact person's title/positionMembership Management

Until membership withdrawal

Or until agreement withdrawal

Membership Registration (Corporation)OptionalShareholder registryMembership Management

Until membership withdrawal

Or until agreement withdrawal

Paid service usageMandatoryFor overseas credit card payment: Card issuer name, Card number, etc.Purchase and usage of paid services

Until service purchase completion

 

※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period.

My Page > Account InformationOptional(Corporate/Institution) Account holder name, Bank name, Account numberRefund, Settlement

Until refund and settlement completion

 

※ However, in cases where preservation is required under relevant laws and regulations, the data will be retained until the end of the specified period.

 

< Receiving promotional information (marketing, etc.) >

Collection Method

Category

Items Collected

Purpose of Collection

Retention and Use Period

Membership RegistrationOptionalName, Phone number, Email, Date of birth, Company (Institution) Name, Country affiliation information, Contact person's department name, Contact person's title/positionInformation and promotional material regarding products and services, Promotions and events, Customer-specific marketing

Until membership withdrawal

Or until withdrawal of consent for receiving promotional information

※ The above items are optional, so even if you do not agree, there are no restrictions on using the service, and you can refuse to receive them at any time.

※ However, important information related to service provision, such as member information and transaction information, will be sent regardless of whether you agree to this item.

 

2) In principle, the company processes personal information according to the specified retention and use period, but in the following cases, personal information is retained for the specified period according to the relevant retention reasons. 

Category

Reason for Retention

Retention Period

During ongoing investigation or inquiryIn case of violation of relevant laws and regulationsUntil the conclusion of the investigation or inquiry
Records related to contracts or withdrawal of subscriptionsElectronic Commerce and Consumer Protection ActFor 5 years after membership withdrawal or termination of service provision
Records related to payment and supply of goodsFor 5 years after membership withdrawal or termination of service provision
Records related to display and advertisingFor 6 months after membership withdrawal or termination of service provision
Records related to consumer complaints or dispute resolutionFor 3 years after membership withdrawal or termination of service provision
Website visit recordsAct on the Protection of Communications SecretsFor 3 months after membership withdrawal or termination of service provision
Records of transaction facts such as tax invoices or receiptsValue-Added Tax ActFor 5 years after membership withdrawal or termination of service provision

 

3) Users under the age of 19 are restricted from registering as members, and related personal information is not collected.


 

Article 2 ( Provision of Personal Information to Third Parties )

1) In principle, the company does not collect, disclose, or provide to outside parties more than the personal information collected without the user's prior consent.

 

2) In the event of an emergency such as a disaster, infectious disease, incident or accident causing imminent life or physical danger, or imminent property loss, the company may provide information to the relevant authorities without the user's consent.

 

3) If an investigation, investigation, etc. is in progress due to a user's violation of relevant laws, the company may provide information to the relevant investigative agency without the user's consent.

 

4) Information may be provided in a form that does not personally identify individuals for the purpose of obtaining prior consent from users or for statistical, research, market research, etc.

 

5) If there is a request in accordance with the procedures set forth in other relevant laws and regulations, information may be provided to the relevant agency.


 

Article 3 ( Outsourcing of Personal Information Handling Tasks )

The company entrusts personal information as follows to improve services, and regulates necessary matters to ensure that personal information is safely managed when entering into a consignment contract in accordance with relevant laws and regulations.

Service Provider

Entrusted Tasks

KOREA MOBILE CERTIFICATION INC.Mobile phone verification
Hecto Financial Co., Ltd.Bank transfer, Account transfer, Credit card, and other payment methods
U Fintech Hub Inc.Settlement payment remittance, Overseas remittance
BusinessOn Communication Co., Ltd.Electronic contract
LinkHub.Electronic tax invoice

 

Article 4 ( Personal Information Destruction Procedure and Method )

1) In principle, users' personal information is destroyed without delay once the purpose of use has been achieved.

 

2) Destruction Procedure : Users' personal information is transferred to a separate database (in the case of paper, a separate filing cabinet) and stored safely, and is stored for a certain period of time or immediately destroyed in accordance with internal policies and other relevant laws. At this time, personal information transferred to the DB will not be used for any other purpose except as required by law.

 

3) Destruction Method : Personal information printed on paper is completely destroyed by shredding or incineration, and personal information stored in the form of electronic files is completely deleted using technical methods that render the records unrecoverable.


 

Article 5 ( Rights, Obligations, and Exercise Methods of Data Subjects )

1) The information subject may exercise the right to request the company to view, correct, delete, or suspend processing of the user's personal information at any time. Additionally, if you do not agree to the company's processing of your personal information, you may refuse consent or request cancellation of membership. However, in such cases, it may be difficult to use some or all of the services.

2) Users can view and edit personal information in the My Page > My Information menu.

3) Users can withdraw membership from the My Page > My Information menu.

4) Rights can be exercised against the company through writing, e-mail, facsimile (fax), etc. in accordance with Article 41, Paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the company will take action without delay.

5) Rights can also be exercised through an agent, such as the information subject's legal representative or a person authorized to do so. In this case, you must submit a power of attorney according to the form in Appendix No. 11 of the “Notice on Personal Information Processing Methods (No. 2020-7).”

6) Requests to view and suspend personal information processing may limit the information subject's rights pursuant to Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.

7) Requests for correction or deletion of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.

8) When requesting access, correction/deletion, or suspension of processing in accordance with the user's rights, the company verifies whether the person making the request is the person himself or a legitimate agent.


 

Article 6 ( Measures to Ensure the Security of Personal Information Protection 

When processing users' personal information, the company establishes and operates technical, managerial, and physical protection measures to prevent personal information from being lost, stolen, altered, or damaged.

 

1) Technical Measures

- Encryption of Key Information

The user's password is encrypted, stored and managed, and personal information can only be checked and changed by those who know the password.

- Protection Measures against Hacking and Other Intrusions

To prevent members' personal information from being leaked or damaged by hacking or computer viruses, we install a system in an area where access from the outside is controlled. In preparation for damage to personal information, data is backed up on a regular basis, and the latest anti-virus programs are used to prevent users' personal information or data from being leaked or damaged. Personal information can be safely transmitted over the network through encrypted communication, etc. We are making sure to do so.

- Access Control to Personal Information Processing Systems

We are taking measures to control access to personal information by granting, changing, and deleting access to the system that processes personal information, and using an intrusion prevention system to control unauthorized access from outside.

2) Administrative Measures

- Regular Internal Audits

To ensure the safety of personal information handling, we conduct regular self-audits and strive to recognize, analyze, and supplement risks to personal information in various environments.

- Training for Personal Information Handlers

We minimize the possibility of leaks by keeping the number of employees handling personal information to a minimum. In addition, we continue to emphasize the protection of users' personal information through regular and frequent training and campaigns for all executives and employees, including those who handle personal information.

- Operation of Personal Information Protection Organization

Through our in-house organization, we regularly and frequently check whether the personal information processing policy has been implemented and whether the person in charge is complying with it. If a problem is discovered, we strive to correct it immediately.

 

3) Physical Measures

- Unauthorized Access Control

The system where personal information is stored restricts access to a separate location. Additionally, access by unauthorized persons is fundamentally blocked.


 

Article 7 ( Installation, Operation, and Rejection of Automatic Personal Information Collection Devices )

1) The company uses ‘cookies’ to store usage information and retrieve it from time to time in order to provide individualized services to users.

2) A cookie is a very small text file that the website sends to the user's browser when the user accesses the website and is stored on the user's PC.

3) The purpose of cookies is to store and frequently retrieve user information in order to provide personalized and customized services. When a user visits a website, the website server reads the cookies stored on the user's device to maintain the user's preferences and provide customized services. Cookies help users access and conveniently use the website when they visit the website. In addition, it is used to provide customized information, such as optimized advertisements, based on the user's website visit history and usage patterns.

4) Users have the option to install cookies and can accept or reject cookies through cookie settings in ‘Settings > Privacy > Cookies and other site data’ at the top of the web browser. However, if you refuse to install cookies, it may be inconvenient to use the service, and it may be difficult to use some services that require login.


 

Article 8 ( Personal Information Protection Officer and Complaint Handling Department )

The company has designated a personal information protection manager and grievance department to handle inquiries and complaints related to users' personal information.

 

Personal Information Protection Officer

Complaints Handling Department

Department/Name: CEO Jung Minchan

Email: [email protected]

Contact: 070-8886-2966

Department: C/S Team

Email: [email protected]

Contact: 070-8886-2966


 

Article 9 ( Remedies for Violations of Data Subject Rights )

1) In order to receive relief from personal information infringement, users may apply for dispute resolution or consultation at the Personal Information Dispute Mediation Committee or the Korea Internet & Security Agency's Personal Information Infringement Reporting Center. For other personal information infringement reports and consultations, please contact the organizations below.

■ Personal Information Infringement Report Center : privacy.kisa.or.kr / 118 (Without area code)

■ Personal Information Dispute Mediation Committee : www.kopico.go.kr / 1833-6972 (Without area code)

■ Supreme Prosecutors' Office : www.spo.go.kr / 1301 (Without area code)

■ Korean National Police Agency : ecrm.police.go.kr / 182 (Without area code)

2) The company guarantees the information subject's right to self-determination of personal information and strives to provide consultation and relief for damage caused by personal information infringement. If you need to report or consult, please contact the personal information related department.

③ Dispositions made by the head of a public institution in response to requests pursuant to the provisions of Article 25 (view of personal information), Article 26 (correction and deletion of personal information), and Article 37 (suspension of processing of personal information, etc.) of the Personal Information Protection Act. Or, a person whose rights or interests have been infringed due to an omission may request an administrative trial in accordance with the provisions of the Administrative Appeals Act.


 

Article 10 ( Matters regarding the Implementation and Modification of Privacy Policy )

① Please be advised that this “Personal Information Processing Policy” does not apply to other services linked within the company’s services.

② This personal information processing policy will be effective from March 26, 2024, and any additions, deletions, or modifications to the current personal information processing policy will be notified through “Notices” in the service at least 7 days prior to the revision.

③ You can check the previous privacy policy by clicking “View previous privacy policy” at the top right of the privacy policy.

 

Date of Announcement: March 26, 2024

 

Effective Date: March 26, 2024