Megazone Cloud CloudPlex Privacy Policy (VER.1.0)

'CloudPLEX' (protecting to the 'company') takes the protection of protecting personal information very much and is doing its best to protect the personal information provided to the company by users in order to use the company's services. Incurred, the Company Complies with Laws Related to Personal Information Protection, such as the “Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.” and the “Personal Information Protection Act” Is being complied with.
The company disagreements this privacy policy on the front page of the site so that users can easily check it at any time.
This personal information processing policy may be changed due to changes in related laws and guidelines or changes in the company's internal policies, and in the event of change, the company will immediately notify the reason and contents of the change through the website.
The company uses the user's personal information within the scope, and if the scope is intended or changed, the user's prior consent is considered.

‍

Article 1 (Personal information items collected)

The company processes the following personal information items.

One. Personal information items collected

Collection items

CloudPlex Media
- Required items: [Required information] Name, email address
- Collection Points: When the Service First Starts
Megazone account
- Collect items:
  - [Required information] Email, name, password
  - [Optional information] Profile image, mobile phone number, address, gender, date of birth, company
- Time of Collection: When First Seen as a Member

Two. How we collect personal information

When the user enters the collection of personal information and enters the information during the process of signing up and using the service
Collection through consent to third party provision for membership registration
The company processes collected personal information for the following discussions. Personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, intended measures will be taken, such as separately consenting in considering with Article 18 of the Personal Information Protection Act.

‍

Article 2 (Purpose of Processing Personal Information)

The company processes collected personal information for the following discussions. Personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, intended measures will be taken, such as separately consenting in considering with Article 18 of the Personal Information Protection Act.
- Category: Console Operators
- Processing Purpose: For Cloud Plex Console Authentication.
- Collection method: Collection through API through Megazone account
The company does not collect personal information from children under 14 years of age.
The company generated information such as usage records, access logs, and access IP information when users use the company's website or other services provided by the company.

‍

Article 3 (Retention and use period of personal information)

The Company Processes and Retention Personal Information within the Personal Information Retention and Use Period in Retention with the Law or within the Personal Information Retention and Use Period after When Retaining Personal Information from the Information Subject.
The processing and use (retention) period for each personal information is as exhaustive.
1. Personal information processing and use (retention) period for CloudPlex Service Management
  - Category: Verified accounts
  - Reason for retention: information management for service authentication
  - Period of use (retention period): until service termination
  - If any of the following reasons apply, it will be necessary until the relevant reason ends.
    1. If an investigation, investigation, investigation is in progress for violation of relevant laws and investigation, until the end of the investigation or investigation,
    2. If any claims/debt relationships are due to use of the website, until the relevant claims/debt relationships are involved.
2. Offered by law following the provision of goods or services
  - Classification: Books and supporting documents for all transactions considered by tax laws
  - Related laws: Basic National Tax Act
  - Period of use (retention period): 5 years

‍

Article 4 (Rights, Rights and Methods of Exercise of Users and Legal Disputes)

The information subject can exercise his/her rights, such as considering the company to view, correct, delete, or suspend processing of personal information at any time.
The information subject's rights can be acted out against the company through writing, e-mail, facsimile (fax), arguing in opposition with Article 41 (1) of the Personal Information Protection Act, and the company will take action without delay.
- [Personal information viewing/provision request department and contact information]
- Department in charge: Cloud Plex Contact: cloudplex@megazone.com
The information subject's rights can be acted out through an agent, such as the information subject's legal representative or a person authorized to do so. In this case, you must submit a power of attorney in the format of Appendix 11 of the Enforcement Rules of the Personal Information Protection Act.
Requests to view and suspend personal information processing may limit the information subject's rights are considered to Article 35 (5) and Article 37 (2) of the Personal Information Protection Act.
Requests for correction or correction of personal information cannot be requested if the personal information is specified as the subject of collection in other laws and regulations.
Whether the company verifies the person making the request, such as a request for viewing, a request for correction or correction, or a request for suspension of processing, is the person or a requesting agent in dealing with the information subject's rights.

‍

Article 5 (Destruction of Personal Information)

When personal information was destroyed, such as when the personal information retention period has been passed or the purpose of processing has been delayed, the company destroys the relevant personal information without delay.
In cases where personal information must continue to be considered to other laws and regulations the expiration of the personal information retention period consented to by the information subject or the purpose of processing has been considered, the personal information may be considered to a separate database (DB) or stored in a different storage location. and preserve it.
The procedures and methods for treating personal information are as described.
- Destruction procedure
  - The Company Prepares the Personal Information that Requires Destruction and Destroys the Personal Information with the Approval of the Company's Personal Information Protection Manager.
- Destruction method
  - personal information recorded and stored in the form of electronic files is destroyed so that the records cannot be reproduced.
  - Personal information recorded and stored in paper documents is destroyed by shredding or incineration.

‍

Article 6 (Technical and Administrative Protection Measures for Personal Information)

When processing personal information, the company is taking the following technical/administrative measures to ensure safety and prevent personal information from being lost, stolen, leaked, modified or damaged.

Determinants of internal management plan
- The company has established and implemented an internal management plan to safely manage personal information processed by the company.
Encryption of user's personal information
- Confidential personal information is encrypted, stored, and managed. Secretly, we use separate security features such as encrypting important data when storing and encrypting it.
Measures against hacking, etc.
- The company is doing its best to prevent members' personal information from being leaked or compromised by hacking or computer threatening. In preparation for damage to personal information, we collected back up data, use the latest anti-virus programs to prevent dangerous personal information or data from being leaked or damaged, and ensure that personal information can be safely over the network through encrypted communication, etc. I'm doing it. We control unauthorized access from the outside using an intrusion prevention system, and striving to equip all possible technical devices to secure security.
Minimization and training of processing staff
- The company's personal information processing staff is limited to the person in charge, and a separate password is provided for this purpose and updated instructions. Compliance with the company's personal information processing policy is always required through regular training for the person in charge.
Operation of a dedicated personal information protection organization
- In addition, through an investigation personal information protection organization, we check the implementation of the company's personal information processing policy and whether the person in charge is complying with it, and if any problems are problematic, we aim to correct them immediately.
  However, the company is not responsible for any problems caused from concerns of personal information due to the user's carelessness or internet problems.

‍

Article 7 (Matters involving the installation, operation and refusal of automatic personal information collection devices)

The company uses' cookies' to store usage information and retrieve it from time to time to provide service convenience to users.
Cookies are a small amount of information that the server (https) used to run the website stored to the user's computer browser and are sometimes stored on the hard disk of the user's PC computer.
1. Purpose of Cookie Use: It is used to provide optimized information to users by considering the visit history, secure access, considering for each service and website visited by the user. (Cookie information presented by the company is used for events, personalization, etc. There is no separate information for customized services.)
2. Installation, operation and refusal of cookies: you can expect the storage of cookies through the option settings in the Tools > Internet Options > Personal Information menu at the top of your web browser.
  However, if you choose to store cookies, you may have tried using the service.
3. To accept cookie settings, can you allow all cookies, confirm each time you save a cookie, or decide to save all cookies by selecting the options in the web browser you are using.
  However, if you want to install cookies, there may be optional services.
  - *Internet Explorer:
    Select Tools menu > Select Internet Options > Click Privacy tab > Advanced privacy settings > Cookie level settings
  - *Chrome:
    Select Settings menu > Select Show advanced settings > Privacy & security > Select content settings > Set cookie level
  - *Safari:
    Select the Settings menu > Select the Privacy tab > Cookie and website data level settings

‍

Article 8 (Personal Information Protection Manager and Department in Charge)

In order to protect personal information and handle personal information related to personal information, the company designates relevant departments and a personal information protection officer as a personal information protection officer.
- Personal information protection officer
  - Name: Joowan Lee
  - Position: Personal Information Protection Manager
  - Phone number: 1644-2243
- Department of Personal Information Protection
  - Department in charge: Cloud Flex
  - Phone number: 1644-2243
  - Email: cloudplex@megazone.com
Users (information discussions) can inquire about all personal information protection-related issues that arise while using the company's services to the personal information protection manager or the department in charge. The company will provide prompt and prompt answers to the user's (information subject) answers.

‍

Article 9 (Methods for Relief from Rights Infringement)

Information complaints can inquire about damage relief and consequences personal information infringement to the organizations below.

Information Breach Reporting Company (operated by Korea Internet & Security Agency)
- Infringement: Reporting Personal Information Infringement, Infringement
- Website: Privacy.kisa.or.kr
- Phone: 118 (without area code)
- Address: 58324) Personal Information Infringement Reporting Company, 3rd floor, 9 Jinheung-gil, Naju-si, Jeollanam-do (Bitgaram-dong 301-2)
personal information Committees
- Dispute: Request for Personal Information Dispute Resolution, Group Dispute Resolution (Civil Resolution)
- Website: www.kopico.go.kr
- Phone: (no area code) 1833-6972
- Address: 03171) 4th Floor, Seoul Government Complex, 209 Sejong-daero, Jongno-gu, Seoul
Supreme Prosecutors' Office Cyber Crime Investigation Team
- Website: www.kopico.go.kr
- Phone: (without area code) 1301
National Police Agency Cyber Security Bureau
- Website: cyberbureau.police.go.kr
- Phone: (without area code) 182

‍

Article 10 (Responsibility for linked sites)

The Company may provide users with links to other companies' websites or materials. In this case, since the company has no control over external sites and materials, it cannot be held responsible for and cannot guarantee the uselessness, truthfulness, or legality of the services or materials provided from them. If you click on a link included by the company and move to a page on another site, the privacy policy of that site is unrelated to the company, so please check the policy of the newly visited site.

‍

Article 11 (Changes to personal information processing policy)

If there are any additions, deletions or revisions to the current personal information processing policy, we will notify you through 'Notice' on the website at least 7 days prior to the revision. However, if there are changes to user rights, such as collection and use of personal information, provision to third parties, etc., notification will be provided at least 30 days in advance.

‍

Personal information handling policy initial enforcement date: January 1, 2020

Personal information processing policy enforcement date: January 1, 2020

Updated