Design Compass (hereinafter referred to as the “Company”) complies with the Personal Information Protection Act and related laws and regulations, and has established a personal information processing policy in accordance with the Personal Information Protection Act to do its best to protect the rights and interests of users. Through the personal information processing policy, the company informs you of the purpose and method of using the personal information provided by the user and what measures the company is taking to protect personal information.

Article 1 Purpose of collecting personal information

The company processes personal information for the following purposes.

1. Membership registration and management
– Identification according to the use of membership services, maintenance and management of membership, prevention of illegal use and unauthorized use of services, various notices and notices, handling complaints such as complaint handling and customer consultation, and preservation of records for dispute mediation

2. Provision of goods or services
– Implementation of contracts for service provision and fee settlement according to service provision, content provision, purchase and fee payment, refund, delivery of goods, identity verification, fee collection

3. Service improvement and marketing use
– Delivery of promotional information such as new service (product) development and specialization, events, etc.
– Service provision according to demographic characteristics, advertisement posting, access frequency identification, and statistical analysis of member service use

Article 2 Processing and retention period of personal information

In principle, the company destroys the information without delay after the purpose of collecting and using personal information is achieved. However, if it is necessary to preserve it in accordance with the provisions of related laws, the company will keep the member information for a certain period of time as set forth in the relevant laws and regulations as follows, in which case the company will keep the personal information separately.

1. Records of contracts or cancellation of subscription, etc.: 5 years (Act on Consumer Protection in E-Commerce, etc.)
2. Records of payment and supply of goods, etc.: 5 years (Act on Consumer Protection in E-Commerce, etc.)
3. Records of consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in E-Commerce, etc.)
4. Records on display/advertisement: 6 months (Act on Consumer Protection in E-commerce, etc.)
5. Records of website visits: 3 months (Communications Secrets Protection Act)
6. Records of reporting of value-added tax base and tax amount: 5 years (Value-added Tax Act)

Article 3 Items of personal information processed

The company collects the following personal information from users when signing up for membership or using services.

1. Items of personal information collected
1-1 When you sign up for membership, the following information is collected.
– When using an email account: [Required] Name, email address, mobile phone number, password

1.2 The following information may be collected during service use.
– Service use record, access log, IP information, bad use record, country, device information (model name, OS information, MAC information, language and country information, device unique identification number, advertising identifier)

1.3 When providing services that require age verification and identity verification, the following information may be collected.
– When verifying the identity of the mobile phone: name, date of birth, gender, overlapping subscription confirmation information (DI), connection information (CI), domestic and foreign information

1.4 When you contact customer service, the following information may be collected.
– Email address, mobile phone number

1.5 When making a paid payment, the following information may be collected:
– Necessary information is collected by the PG company depending on the payment method (credit card, bank transfer, lifelong education voucher, and other payment methods).
– In case of refund: name, contact information, bank name, account holder, account number

1.6 When event prizes, etc. are paid out, the following information may be collected.
– Delivery product: name, address, phone number
– Mobile product: name, mobile phone number
– When processing taxes and dues for prizes: the front side of a copy of ID card (for the purpose of processing other income reports under the Income Tax Act)

1.7 Additional information may be collected when using the services below, in which case separate consent for collection and use of personal information may be obtained.
– When entering additional information on My Page: nickname, profile picture
– When participating in an event: Collect after receiving consent for separate collection and use of personal information

2. Personal information collection method
– Homepage or mobile web/app membership registration, service use, member information modification, written form, phone, fax, customer center consultation, event application, provision from partner companies, collection through generated information collection tools, and survey tools collection

※ In principle, the company does not collect personal information of children under the age of 14.

Article 4 Provision of personal information to third parties

1. The company processes users’ personal information only within the scope notified in 『1. Purpose of processing personal information』 and, in principle, does not provide users’ personal information to third parties. However, the following cases are exceptions.
1-2 If the user agrees to provide personal information to a third party for transaction execution, only the minimum amount of personal information necessary for service provision and delivery, identity verification, etc. may be provided to the service provider.
1-2 In cases where there is a request from an investigative agency in accordance with the provisions of laws and regulations or in accordance with the procedures and methods stipulated by laws and regulations for the purpose of investigation or investigation.
1-3 In case of providing information in an anonymized form that does not identify specific individuals for the purpose of compiling statistics, academic research, or market research

Article 5 Procedures and methods for destroying personal information

1. Destruction Procedure and Period: When personal information becomes unnecessary due to the expiration of the personal information retention period, achievement of the processing purpose, etc., the Company destroys the relevant personal information without delay. However, in cases where personal information must be retained in accordance with other laws specified in 『2. Personal Information Processing and Retention Period』, the relevant personal information is transferred to a separate database (DB) or stored in a different location, and when the retention period specified has expired, the personal information is destroyed without delay. In this case, personal information transferred to the DB is not used for any other purpose except in cases required by law.

2. Destruction method
2-1 Information in electronic file format is completely deleted using a technical method that makes it unrecoverable and unreproducible.
2-2 Personal information printed on paper is destroyed by shredding or incineration.

Article 6 Rights, obligations and exercise methods of users and legal representatives

1. Users may request the company to view, correct, delete, withdraw consent, or suspend processing of their personal information at any time. Users can directly view and correct their personal information and withdraw their membership (withdraw consent) through the “My Page” menu within the service. In addition, for related consultations and inquiries, please contact the customer center or the personal information protection officer in writing, by phone, or by email, and we will take action without delay.

2. If a user requests correction of errors in personal information, the personal information will not be used or provided until the correction is completed. In addition, if incorrect personal information has already been provided to a third party, the results of the correction process will be notified to the third party without delay to ensure that the correction is made.

3. Rights may be exercised through a proxy, such as the user's legal representative or an authorized person. In this case, a power of attorney in a separate format must be submitted.

4. Requests for correction or deletion of personal information cannot be made if the personal information is specified as a collection target in other laws.

5. When requesting access, correction, or deletion in accordance with the user's rights, the company verifies whether the person making the request is the user or a legitimate agent.

Article 7 Measures to ensure the security of personal information

In processing users' personal information, the company takes the following administrative and technical measures in accordance with relevant laws and regulations to ensure safety so that personal information is not lost, stolen, leaked, falsified or damaged.

1. Management measures: Establishment and implementation of internal management plan, operation of dedicated organization, regular employee training
2. Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, installation and update of security programs

Article 8 Matters concerning the installation, operation and refusal of automatic personal information collection devices

The company installs and operates cookies to provide user-customized services, etc. The purpose of cookie use and rejection are as follows.

1. What is a cookie?: A cookie is a small amount of information that the server that operates the website sends to the user's computer browser and is stored on the user's computer.

2. Purpose of cookie use: We use cookies to provide personalized services such as target marketing by analyzing users' access frequency and visit time, identifying usage patterns and areas of interest, tracking traces, and identifying the extent of participation in various events and number of visits.

3. Cookie installation, operation and rejection
3-1 Users have the option to choose whether to install cookies, and can choose to allow or reject all cookies or to be notified each time a cookie is saved by selecting options for each web browser. The method to specify whether to allow cookie installation is as follows:
– Microsoft Edge: Settings menu > Cookies and site permissions > Manage and delete cookies and other site data
– Chrome: Settings menu > Select Show Advanced Settings > Privacy-Content Settings > Cookie Level Settings
3-2 However, if you refuse to store cookies, you may have difficulty using some services, such as those that require login.

Article 9 Matters concerning collection, use, and refusal of behavioral information

The company collects and uses behavioral information to provide customized services and benefits optimized to users, online customized advertisements, etc. during the service use process.

1. The company collects behavioral information as follows:

• Items of collected behavioral information
• How to collect behavioral information
• Purpose of collecting behavioral information
• Retention and use period and subsequent information processing method
• Service use record (user's website/app service visit history, browsing history, purchase history)
• Automatic collection when the user visits/runs the website/app service
• Provides personalized product/benefit recommendation service (including advertisements) based on the user's interest and inclination
• Destroy after storage for up to 1 year from the date of collection

2. The company allows online customized advertising businesses to collect and process behavioral information as follows:
– Advertisers who want to collect and process behavioral information: Online customized advertisers
– How to collect behavioral information: Automatically collected and transmitted when users visit our website or run apps
– Behavioral information items collected and processed: Service use records (user’s web/app visit history, search history, purchase history)
– Retention and use period: 1 year

3. The company collects only the minimum amount of behavioral information necessary for online customized advertising, etc., and does not collect sensitive behavioral information that may clearly infringe on an individual's rights, interests, or privacy, such as ideology, beliefs, family and relatives, academic background, military history, or other social activity history.

4. The company collects and uses advertising identifiers for online customized advertising in mobile apps. Users can block or allow customized advertising in apps by changing the settings of their mobile devices.
– Block / allow advertisement identifier of smartphone
4-1 (Android) Settings > Privacy > Advertising > Reset Advertising ID or Delete Advertising ID
4-2 (iPhone) Settings > Privacy > Tracking > Turn off Allow apps to request tracking
※ Depending on the mobile OS version, the menu and method may be slightly different.

5. Users can block or allow online customized advertisements in bulk by changing cookie settings in their web browser, etc. However, changing cookie settings may affect the use of some services.
– Block/allow customized ads through web browser
5-1 Microsoft Edge: Settings > Privacy, search, and services > Select whether to prevent tracking and the level in the Tracking Protection section > Select whether to 'Always use "Strict" tracking prevention when browsing InPrivate' > Select whether to 'Send Do Not Track requests' in the Privacy section below Delete
5-2 Chrome: Settings > Show advanced settings > Click Content settings in the Privacy section > Check the box for 'Block third-party cookies and site data' in the Cookies section

6. Users may inquire about behavioral information, exercise their right to object, report damages, etc. using the contact information below.
– Person in charge: Park Jong-min
– Email: help@designcompass.org

Article 10. Consignment of personal information processing

Design Compass entrusts personal information as follows to improve service, and stipulates the necessary provisions to ensure that personal information is safely managed when entering into an entrustment contract in accordance with relevant laws and regulations.

The Design Compass’s personal information processing agency and the details of the entrusted work are as follows.

Entrustment of personal information processing for online service implementation

10-1 PG Company Name: NHN KCP 

10-2 PG Company Consignment Content: Regular Payment

The Company does not disclose personal information to external parties except to the above-mentioned subcontractors. However, this does not apply in cases where there is a request from an investigative agency in accordance with the procedures and methods stipulated by law or for investigative purposes based on legal provisions. In addition, in cases where it is necessary for compiling statistics, conducting academic research, or conducting market research, it may be provided in the form of processed statistical data that does not identify specific individuals.

Article 11 Personal Information Protection Department and Personal Information Access Request Reception and Processing Department

11-1 Users may inquire about all personal information protection-related inquiries, complaints, requests for access, etc. that arise while using the company's services to the personal information protection officer listed below. The company will promptly respond to and process user inquiries.
Privacy Officer
– Department name: Park Jong-min
– Contact:07080803192
– Email: help@designcompass.org

11-2 Users may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, etc. to seek relief for personal information infringement. For other reports or consultations on personal information infringement, please contact the following organizations.
1) Personal Information Dispute Mediation Committee: https://www.kopico.go.kr / (without area code) 1833-6972
2) Personal information infringement reporting center: https://privacy.kisa.or.kr / (without area code) 118
3) Supreme Prosecutors' Office: https://www.spo.go.kr / (without area code) 1301
4) National Police Agency: https://ecrm.cyber.go.kr / (without area code) 182

Article 12 Changes to the Personal Information Processing Policy

12-1 This privacy policy applies from August 16, 2024.
The personal information processing policy prior to 12-2 can be found below.