<PlayHard> ('https://sites.google.com/view/playhardco' or 'PlayHard') is a program that protects the privacy and rights of users in accordance with the Personal Information Protection Act, The following policy has been put in place to ensure smooth handling of complaints.
'Play Hard' company will notify you through the website announcement (or individual announcement) when revising the personal information processing policy.
○ This policy will be effective from April 28, 2017.
1. Purpose of Personal Information <Play Hard Co., Ltd. processes personal information for the following purposes. The processed personal information will not be used for any purpose other than the following purposes.
end. Providing goods or services
We handle personal information for the purpose of service delivery, payment settlement, settlement, etc.
2. Personal Information File Status
1. Personal information Filename: Payment history
- Personal information items: email, payment history
- Collection method: Supplied from partner
- Possession basis: DB
- Retention period: 5 years
- Related laws and regulations: Records on payment and goods supply: 5 years
3. Processing and Retention Period of Personal Information
① 'Play Hard' will process and hold personal information within the period of using and maintaining personal information according to laws and regulations, or during the period of using or storing personal information agreed upon when collecting personal information from information subject.
② Each personal information processing and retention period is as follows.
1. <goods or service provision>
Personal information related to the <goods or services> is collected and used for the purpose of the above use up to <5 years from the date of consent for collection and use.
- Possession basis: DB
- Related laws and regulations: Records on payment and goods supply: 5 years
4. Rights, duties, and methods of use of information subjects As a personal information subject, users can exercise the following rights.
① The information subject can exercise the right to protect personal information of 'Play Hard' at any time.
1. Personal information request
2. If there is an error,
3. Delete request
4. Process stop request
② The exercise of the rights pursuant to Paragraph 1 may be done through written, e-mail or fax (FAX) according to Form 8 of the Enforcement Regulations of the Personal Information Protection Act for 'Play Hard' I will take action without delay.
③ When a subject requests correction or deletion of personal information, 'Play Hard' will not use or provide the personal information until the correction or deletion is completed.
(4) The exercise of rights under Paragraph (1) may be made through a legal representative of the information entity or an agent such as a person who has been delegated. In this case, you must submit a power of attorney according to Form 11 of the Enforcement Regulations of the Personal Information Protection Act.
5. Creating an item of personal information to process
① 'Play Hard' deals with the following personal information items.
<Supply of goods or services>
- Required fields: email, payment history
6. Destruction of Personal Information In principle, Play Hard shall destroy personal information without delay when the purpose of processing personal information is achieved. The procedures, deadlines and methods of destruction are as follows.
- Destruction procedure Information entered by the user is transferred to a separate DB after the completion of the purpose (separate documents in case of paper) and is destroyed after a certain period of time according to the internal policy and other relevant laws and regulations or immediately destroyed. In this case, the personal information transferred to the DB will not be used for any other purposes unless it is under the law. - Time to destroy Personal information of the user, within 5 days from the end of the holding period, In the event that personal information becomes unnecessary, such as the attainment of the purpose of processing personal information, the abolition of the service, or the termination of the business, we will destroy the personal information within 5 days from the day when it is deemed unnecessary to process personal information.
- Destruction method
Information in the form of electronic files is a technical method that can not reproduce records.
Personal information printed on paper is crushed by crusher or destroyed by incineration.
7. Measures to Ensure the Safety of Personal Information "Play Hard" has the technical, administrative and physical measures necessary for securing safety in accordance with Article 29 of the Personal Information Protection Act as follows.
1. Regular self-audit conducted
We conduct our own audits regularly (quarterly) to ensure the stability of handling personal information.
2. Minimization and training of personal information handling staff
Employees who deal with personal information are designated and limited to the person in charge, and measures are taken to minimize personal information.
3. Establishment and enforcement of internal management plan
We have established and implemented an internal management plan for the safe handling of personal information.
4. Technical measures against hacking
'Play Hard' installs a security program to prevent leakage and damage of personal information caused by hacking or computer viruses, periodically updates and checks the system, installs the system in an area where access from outside is controlled, and technically / physically monitors and blocks We are doing.
5. Encryption of personal information
The personal information of the user is encrypted and stored and managed so that only the user can know it, and the important data is using the separate security function such as encrypting the file and transmission data or using the file lock function.
6. Preventing the keeping of connection logs and forgery
We maintain and manage the records of access to the personal information processing system for at least six months and use the security function to prevent forgery, theft and loss of access records.
7. Restrict access to personal information
We take necessary measures to control access to personal information through granting, modifying, and deleting access rights to the database system that processes personal information. We also control unauthorized access from outside by using an intrusion prevention system.
8. Using locks for document security
We keep documents with personal information and auxiliary storage media in safe place with lock.
9. Access control to unauthorized persons
We have set up a separate physical storage area for personal information and set up access control procedures.
8. Wrote Personal Information Protection Officer
① Play Hard is responsible for the handling of personal information and has designated the person responsible for personal information protection as follows for the complaint handling and damage relief of the information related to personal information processing.
▶ Personal information protection officer
Name: Shin, Hyuk
Position: Representative
Email: playhard.hi@gmail.com
※ It leads to personal information protection person.
② The information subject can inquire about personal information protection related complaints, complaint handling, and damage relief when using the service (or business) of 'Play Hard' to the person in charge of personal information protection and the responsible department. 'Play Hard' will respond to inquiries of information subject without delay and will process it.
9. Change of personal information processing policy
① This personal information processing policy will be applied from the effective date. If there are additions, deletions and corrections of the changes according to laws and policies, we will notify them through announcements 7 days before the implementation of the changes.