All Menu View

All Menu

Privacy Policy

Privacy Policy

DOUZONE BIZON CO., LTD. (hereinafter, the “DOUZONE BIZON”) has established the personal information management policy as follows (the “Policy”) in accordance with the Personal Information Protection Act and Act on Promotion of Information and Communication Network Utilization and Information Protection to protect the rights and interests of the users of the company's services and to handle any problems that the users may face in respect of their personal information.

This Privacy Policy is applied to DOUZONE BIZON's services as follows. Any amendment of this Policy will be publicly announced by a posting on the website of the company.

1. Purpose of Personal Information Management

DOUZONE BIZON processes user’s personal information for the following purposes. Processed information will not be used for any purposes other than for the following purposes. The company will seek prior consent of the persons who are the subjects of the personal information (the “Users”) before any change to the intended use is implemented.

A. Website membership registration and management
DOUZONE BIZON processes personal information for the following purposes: To confirm the User’s intention to be a registered member; To maintain or manage membership status; To verify User identification to comply with the real-name identification policy; To prevent unauthorized use of services; To give public announcement or notice; To handle customer complaints; and To keep records for dispute resolution purposes.
B. Notification of facts of the consultation/report on the Ethics Management homepage and results of the process
C. Provision of goods or services
DOUZONE BIZON processes personal information for the following purposes: To provide services; To provide content To provide customized service; and To accept payment or settle fees
D. Marketing and Advertisement
DOUZONE BIZON processes personal information for the following purposes: To develop new services/products and provide customized services; To provide any event-related or promotional information; To offer an opportunity to participate in events; To provide services based on the demographic characteristics; To publish advertisements based on the demographic characteristics; To confirm service validity; To check access frequencies; or To compile statistics regarding Users’ use of the company’s services.
2. Types of Personal Information Collected and Method of Collecting Personal Information
A. Types of Personal Information Collected
1) DOUZONE BIZON processes the following types of personal information which are collected upon registration for the provision of its services. - Required Items: ID, password, name, e-mail address and mobile phone number
- - Optional Items: Date of birth, position, department, home address, company name, company CEO name, company phone number, company fax number, company address, industry, type of business

2) During the use of the charged services or process of financial settlement, the following personal information may be automatically created and collected.
- Required Items: Credit card information, bank account information, record of payment

3) During the use of the online services or process of business, the following personal information may be automatically created and collected.
- Required Items: IP address, cookies, service usage record, access record
B. Method of Collecting Personal Information
DOUZONE BIZON website, The Ethics Management website, written forms, fax, telephone, customer service forum, e-mail, etc.
C. Right to Refuse Consent and Disadvantages Due to Refusal of Consent
User has the right to refuse consent to collection of required information and optional information additional to those collected by DOUZONE BIZON. Provided, however, when a User refuses collection of the information, then the User may have some difficulties in using the services.
3. Personal Information Processing and Retention Period

DOUZONE BIZON processes and retains personal information during the period permitted by law or agreed by the subject of the information upon collection of his/her personal information.

1) The company retains and uses personal information from the date on which User gives consent to collect or use of his/her personal information for the said purpose such as to manage membership, to deal with complaints, to provide goods and improve services and to use for marketing and advertisement purposes.
2) According to the provisions of the relevant laws such as commercial law and the Act on the Consumer Protection in Electronic Commerce, Etc., if necessary, the company maintains User's personal information for a certain period of time specified by the relevant statutes. In this case, the company uses the information stored for archival purposes only and the retention period is as follows.
Record of contracts and cancellation of contracts: Act on the Consumer Protection in Electronic Commerce, Etc.
- Retention period : 5 years

Record of payment and provision of goods and services: Act on the Consumer Protection in Electronic Commerce, Etc.
- Retention period : 5 years

Record of transactions of electronic finance: Act on the Consumer Protection in Electronic Commerce, Etc.
- Retention period : 5 years

Record of issuance of tax invoice: Act on the Value-Added Tax
- Retention period : 5 years

Record of consumer’s complaints and the settlement of disputes: Act on the Consumer Protection in Electronic Commerce, Etc.
- Retention period : 3 years

Record of collection and processing of credit information: Act on the Information Use and Protection
- Retention period : 3 years
4. Provision of Personal Information to Third Party

DOUZONE BIZON provides personal information to a third party only with User's consent and in accordance with Article 24 of the Act on the Promotion of Information and Communications Network Utilization and Information Protection, Etc.
The following personal information are provided to the third party.

A. National Tax Service
- Personal information is provided to: National Tax Service
- Intended use of the personal information: To issue a tax invoice
- Personal information provided: Name of workplace, name, e-mail address, administrator's phone number, location of workplace
- Period of retention and use of the personal information: Any date that comes first between service subscription date, service cancellation date, and termination date of the provision contract
B. Korea Financial Telecommunications and Clearings Institute
- Personal information is provided to: Korea Financial Telecommunications and Clearings Institute
- Intended use of the personal information: CMS services for withdrawal/transfer
- Personal information provided: Mobile phone number, date of birth, bank account information
- Period of retention and use of the personal information: 5 years
C. Ethical Management Consultation/Report
- Personal information is provided to: DOUZONE HOLDINGS, DOUZONE KICOM, iTAXnet, DOUZONE EDUCAM
- Intended use of the personal information: To confirm facts gathered from consultations and reports and to enforce follow up procedures such as reward or disciplinary action
- Personal information provided: Name, telephone number, mobile phone number, e-mail address
- Period of retention and use of the personal information: Destroyed immediately upon completion of all procedures regarding consultations and reports
D. On the ground of laws and regulations, or for the purpose of investigation upon the request of investigative agencies in accordance with stipulated procedures and methods.
5. Entrustment of Personal Information Processing

DOUZONE BIZON entrusts certain affairs related to personal information processing as follows in order to smoothly handle such matters:

A. Management of website-related infrastructure
- Personal information is provided to: National Tax Service
- Intended use of the personal information: To issue a tax invoice
- Personal information provided: Name of workplace, name, e-mail address, administrator's phone number, location of workplace
- Period of retention and use of the personal information: Any date that comes first between service subscription date, service cancellation date, and termination date of the provision contract
B. Integration service for bank accounts
- Personal information is provided to: Korea Financial Telecommunications and Clearings Institute
- Intended use of the personal information: CMS services for withdrawal/transfer
- Personal information provided: Mobile phone number, date of birth, bank account information
- Period of retention and use of the personal information: 5 years
C. Maintenance of Customer Counseling System
- Personal information is provided to: DOUZONE HOLDINGS, DOUZONE KICOM, iTAXnet, DOUZONE EDUCAM
- Intended use of the personal information: To confirm facts gathered from consultations and reports and to enforce follow up procedures such as reward or disciplinary action
- Personal information provided: Name, telephone number, mobile phone number, e-mail address
- Period of retention and use of the personal information: Destroyed immediately upon completion of all procedures regarding consultations and reports
D. Management of website-related infrastructure
- - Personal information is provided to: MALGNS SOLUTION
- Intended use of the personal information: To maintain and manage the website and servers
- Personal information provided: ID, name, phone number, e-mail address
- Period of retention and use of the personal information: Until the termination of entrustment agreement
E. Website Authentication Service
- Personal information is provided to: NICE Information Service
- Intended use of the personal information: Identity verification
- Personal information provided: Name, mobile phone number, i-PIN
- Period of retention and use of the personal information: Destroyed without delay
F. When entering into an entrustment agreement, DOUZONE BIZON specifies the following matters in the agreement or in any written form in accordance with Article 25 of the Personal Information Protection Act so that the company can make sure that the entrusted party handles personal information with safety:
∙ Prohibiting the entrusted party from processing personal information for any purpose other than for the performance of the entrusted affairs;
∙ Technical and administrative measures to protect personal information;
∙ Restricting re-entrustment of personal information processing;
∙ Matters related to managing/supervising the entrusted party;
∙ Liabilities of the entrusted party, including damage compensation.
G. Any change of the entrusted party or contents of the entrusted affairs will be immediately disclosed through this Policy.
6. Rights of the Users and Methods to Exercising Such Rights

As the subject of the personal information, the User may exercise the following rights:

A. The User may at any time exercise the following rights against DOUZONE BIZON in order to protect his/her personal information:
(1) Right to have access to personal information
(2) Right to request correction of any error
(3) Right to request deletion of information
(4) Right to request discontinuance of personal information processing
B. The rights referred to in Paragraph A above may be exercised by completing Form 8 of the Enforcement Regulation of the Personal Information Protection Act and submitting to DOUZONE BIZON as hard copy, or by email or facsimile. DOUZONE BIZON will immediately take action upon receipt of such request.
C. In case the User requests correction or deletion of any error in his/her personal information, DOUZONE BIZON will not use or provide the concerned information until such correction or deletion is completed.
D. The rights referred to in Paragraph A above may be exercised by a legal agent or an authorized representative of the User. In such a case, a power of attorney as provided in Form 11 of the Enforcement Regulation of the Personal Information Protection Act must be submitted.
7. Installation, Operation, and Rejection of Personal Information Auto Collection Device

DOUZONE BIZON operates a device that collects personal information, such as cookies, which frequently store and locate User information. Cookies are tiny text files that the server, which runs the company's website, sends to User's browser and stores on User's computer's hard disk. The company shall use encrypted cookies for the following purposes.

A. Purpose of Using Cookies
It is to provide target marketing and customized service by analyzing access frequency, visiting time, User’s taste and interests, tracing tracks, and number of visits. Users have the option of installing cookies. Therefore, users can choose to accept all cookies or to verify every time cookies are stored, or to refuse to store all cookies by setting options in a web browser.
B. How to reject installation of cookies
You can allow all cookies, or go through confirmation every time a cookie is saved, or reject saving of all cookies by setting options in the web browser you are using.
- Installation Example (Interment Explorer) : Tools > Internet Option > Privacy
(But, service provision might be limited when cookie installation is rejected.)
8. Disposal of Personal Information

When any of the personal information becomes no longer necessary, DOUZONE BIZON disposes of such personal information without delay.
The process, timing and method of disposal of personal information are as follows:

Disposal Process
A user has an option for setting a cookie. It is to provide target marketing and customized service by analyzing access frequency, visiting time, user’s taste and interests, tracing tracks, degree of event participation, and number of visits. A user has various options of installing cookies. Accordingly, customers can allow all cookies, or go through confirmation every time a cookie is saved, or reject saving of all cookies by setting options.
Disposal Timing
When the retention period expires, the company disposes of any of the personal information within 5 days. When any of the personal information becomes no longer necessary due to fulfillment of its purposes, discontinuance of the service, and conclusion of business, the personal information will be destroyed within 5 days after the occurrence of any event causing such disposal.
Disposal Method
Information in electronic form will be destroyed using technical tools so as to make sure that such information will not be reproduced.
· Personal Information saved as electronic files is permanently deleted with technology to not be able to be replayed.
· Information in paper form will be destroyed by shredding it with a paper shredder or incinerated.
9. Measures to Secure Safety of Personal Information

DOUZONE BIZON takes the following technical, administrative and physical measures necessary to protect personal information in accordance with Article 29 of the Personal Information Protection Act:

A. Minimization of Number of Staff Processing Personal Information and Training
DOUZONE BIZON appoints a minimum number of staff for processing personal information and gives permission to handle personal information only to such staff.
B. Establishment and Implementation of Internal Management Plan
DOUZONE BIZON establishes and implements internal management plan to handle personal information with safety.
C. Encryption of Personal Information
User passwords are stored and managed in an encrypted form so that only the concerned User can know them. In addition, important data are stored and transmitted in an encrypted form, and/or secured by the file locking function.
D. Technological Measures to Prevent Hacking
DOUZONE BIZON installs security programs in order to prevent leakage or damage of personal information caused by computer hacking or virus, and renews and checks the system regularly. In addition, the information system is located where access from outside is controlled and monitored through technical and physical means.
E. Limited Access to Personal Information
DOUZONE BIZON takes measures to control access to personal information by controlling authorization to access personal information database systems, and prevents unauthorized access from outside using intrusion prevention system.
F. Use of Locking Device to Secure Documents
DOUZONE BIZON keeps documents and storage device in a safe place where locking devices are installed.
G. Controlled Access of Unauthorized Personnel
Personal information is stored in a separate physical storage location in which access control procedures are established and implemented.
10. Personal Information Protection Manager
A. DOUZONE BIZON appoints a personal information protection manager who is responsible for all affairs relating to personal information processing, and handling complaints raised by the Users and remedy of damages incurred in relation to personal information processing.
Personal Information Protection Manager
Name Jeong, Jae-geun
Position Director of Future Technology Research Institute
Title Director
Contact +82-2-1688-7001
E-mail avatarjk@douzone.com
Personal Information Protection Center
Name of Division Information & Security Team
Person in Charge Jeong, Hyeon-min, Manager
Contact +82-2-1688-7001
E-mail hmjeong1@douzone.com
B. User may direct all personal information related questions or complaints to the Personal Information Protection Manager and the Personal Information Protection Center. DOUZONE BIZON will promptly respond to such enquiries.
11. Remedy for Infringement on Rights and Interests of Users

User may inquire at the following institutions regarding remedy of damages arising from infringement of personal information, if not fully satisfied with the service of DOUZONE BIZON in handling complaints related to personal information.

· Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
- What they do: Take reports on infringement of personal information and provide counseling services in relation thereto
- Website: privacy.kisa.or.kr
- Contact: 118 (without area code)
· Personal Information Dispute Mediation Committee (operated by Personal Information Protection Committee)
- What they do: Receive applications for mediation of personal information-related disputes and handles collective dispute mediation (civil resolution)
- Website: www.kopico.go.kr
- Contact: +82-2-1833-6972
· Cybercrime Investigation Division of the Supreme Prosecutors’ Office
- Website: http://www.spo.go.kr
- Contact: 1301 (without area code)
· Korean National Police Agency Cyber Bureau
- What they do: Receive applications for mediation of personal information-related disputes and handles collective dispute mediation (civil resolution)
- Website: http://cyberbureau.police.go.kr
- Contact: 182 (without area code)
12. Changes in the Personal Information Management Policy

This Policy will take effect as of November 27, 2020, and any changes, deletion or correction of the policies herein will be announced 7 days prior to the date on which such changes will take effect.

This Policy will take effect as of November 27, 2020.