TubeKinema (hereinafter referred to as "the Company") is committed to protecting the freedom and rights of information subjects by complying with the Personal Information Protection Act and related laws and regulations in providing solutions for love. In accordance with Article 30 of the Personal Information Protection Act, the Company has established and disclosed a privacy policy to guide the procedures and standards for personal information processing and to swiftly and smoothly handle any related grievances. The main points of personal information processing are outlined as follows:

Table of Contents

• Purpose of processing personal information, items collected, retention and use period

• Provision of personal information to third parties

• Destruction of personal information and procedures

• Rights and duties of information subjects and legal representatives, and how to exercise them

• Measures to secure the safety of personal information

• Installation, operation, and refusal of automatic personal information collection devices

• Collection, use, and refusal of behavioral information, etc.

• Personal information protection officer and request for access to personal information

• Remedies for infringement of rights

◾️ Purpose of processing personal information, items collected, retention and use period

① The items of personal information processed by the Company, the purpose of processing, and the retention period are as follows:

Category (Business Name)

Purpose of Processing

Items Collected

Retention and Use Period

Basis for Processing

Customer Consultation and Inquiries

• • Handling of inquiries and management of processing history

  • Required: Service usage records

  • Retention and usage period: 15 days from the date of completion of handling

  • Basis for processing: Consent of the data subject

② The personal information being processed will not be used for purposes other than those listed above. If the purpose of use is changed, necessary measures such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be implemented.

③ The company processes and retains personal information within the period of retention and use of personal information consented to by the information subject at the time of collection or as stipulated by laws. However, personal information will be processed and retained until the end of the relevant reason in the following cases:

• If an investigation or inquiry due to a violation of related laws is in progress, until the end of such investigation or inquiry.

• If a claim or debt relationship arising from the use of the website remains, until the settlement of such claim or debt relationship.

  • If there is a mandatory retention period under relevant laws, until the end of that period.

  • Act on the Protection of Communications Secrets: Records of communications such as website visit records (3 months)

  • Electronic Commerce Act: Records related to contracts or withdrawal of offers (5 years)

  • Electronic Commerce Act: Records of payment and supply of goods, etc. (5 years)

  • Electronic Commerce Act: Records on consumer complaints or dispute resolution (3 years)

  • Electronic Commerce Act: Records on advertisement and display (6 months)

  • Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.: Records on identity verification (6 months)

Provision of Personal Information to Third Parties

• The Company processes personal information within the scope specified for the purpose of processing and only provides personal information to third parties with the consent of the data subject or under special provisions of law, in accordance with Articles 17 and 18 of the "Personal Information Protection Act". The Company will not provide personal information to third parties beyond these circumstances.

• In cases of emergency, such as disasters, infectious diseases, events causing imminent danger to life or physical safety, or imminent property damage, the Company may provide personal information to relevant authorities without the consent of the data subject. In such instances, the Company will provide only the minimum necessary personal information based on the relevant legal grounds, ensuring it is not used for purposes other than intended.

Destruction of Personal Information and Procedures

• The Company will promptly destroy personal information when its retention period has expired or its processing purpose has been achieved, and it becomes unnecessary.

• If the consented retention period of personal information has expired or the processing purpose has been achieved, but the information must be preserved under other laws, the Company will store the personal information separately in a different database (DB) or location.

• The procedures and methods for the destruction of personal information are as follows:

  • Destruction Procedure: The Company selects personal information that has become subject to destruction and destroys it with the approval of the Company's personal information protection officer.

  • Destruction Method: Personal information stored in electronic file format will be destroyed in a manner that makes it impossible to regenerate the records. Personal information recorded and stored on paper will be shredded or incinerated.

Rights and Obligations of Data Subjects and Legal Representatives, and How to Exercise Them

• Data subjects have the right to request access, correction, deletion, or suspension of processing of their personal information from the Company at any time.

• The exercise of rights can be done in writing, via email, or fax, in accordance with Article 41, Paragraph 1 of the "Personal Information Protection Act" enforcement decree, and the Company will act without delay.

• The exercise of rights can also be conducted through a legal representative or an agent authorized by the data subject. In this case, a power of attorney according to the form provided in Annex 11 of the "Notification on Personal Information Processing Methods (No. 2020-7)" must be submitted.

• Requests for access to personal information and suspension of processing may be restricted under Article 35, Paragraph 4, and Article 37, Paragraph 2 of the "Personal Information Protection Act".

• Requests for correction and deletion of personal information may not be possible if the personal information is specified as a collection target under other laws.

• When a request for access, correction, deletion, or suspension of processing is made, the Company will verify whether the requester is the data subject or a legitimate representative.

Measures to Ensure the Security of Personal Information

• • The Company takes the following measures to ensure the security of personal information:

  • Administrative measures: Establishment and implementation of an internal management plan, operation of a dedicated organization, regular employee training.

  • Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, installation, and updating of security programs.

Installation, Operation of Automatic Personal Information Collection Devices, and Rejection

The Company does not use "cookies" that store and retrieve usage information of data subjects at any time.

Collection, Use of Behavioral Information, and Rejection

The Company does not collect, use, or provide behavioral information for online personalized advertising, etc.

Personal Information Protection Officer and Requests for Personal Information Access

• The Company has designated a Personal Information Protection Officer to be responsible for overseeing personal information processing and addressing complaints and remedy for damages related to personal information processing as follows:

  • Data subjects can request access to personal information under Article 35 of the "Personal Information Protection Act" to the department below. The Company will strive to promptly process the data subjects' requests for access to personal information.

    • Personal Information Protection Officer

    • Position/Title: CEO

    • Name: Choi Jong-Wook

    • Email: tubekinema@gmail.com

    • Personal Information Access Request

    • Department: Information Security Team

    • Contact Person: Choi Jong-Wook

    • Email: tubekinema@gmail.com

      Data subjects may inquire with the Personal Information Protection Officer or the responsible department regarding all matters related to personal information protection, complaints, and remedy for damages that arise while using the Company's services (or business). The Company will respond and address the inquiries of data subjects without delay.

Remedies for Rights Infringement

• The Company is committed to ensuring the self-determination rights of data subjects regarding personal information and strives to provide consultation and remedy for damages caused by personal information infringement. Data subjects are encouraged to contact the responsible department if they need to report or consult.

  • Data subjects can apply for dispute resolution or consultation, etc., to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Report Center, etc., to seek remedy for personal information infringement. For other reports and consultations on personal information infringement, please contact the following institutions:

  • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)

  • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)

  • Supreme Prosecutors' Office: 1301 (www.spo.go.kr)

  • National Police Agency: 182 (ecrm.cyber.go.kr)

  • Under the regulations of Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), and Article 37 (Suspension of Processing Personal Information, etc.) of the "Personal Information Protection Act", those who have suffered infringement of rights or interests due to actions or inactions by the head of a public institution can file for administrative review according to the Administrative Appeals Act.

  • Central Administrative Appeals Commission: 110 (www.simpan.go.kr)

Changes to the Privacy Policy

• This policy will be implemented starting from February 9, 2024.