Privacy Policy of <Tishoo Co., Ltd.>
Tishoo Co., Ltd. (hereinafter referred to as "the Company") complies with the Personal Information Protection Act and relevant laws and regulations to protect the rights and freedoms of data subjects. We ensure the lawful processing and secure management of personal data. In accordance with Article 30 of the Personal Information Protection Act, this privacy policy has been established and disclosed to inform data subjects of the procedures and criteria for processing personal data, and to handle any related complaints promptly and smoothly.
Purpose of Processing Personal Data
Tishoo Co., Ltd. processes personal data for the following purposes. The personal data we collect is not used for any purposes other than those specified below. If the purpose of use changes, we will obtain separate consent from the data subject, as required by Article 18 of the Personal Information Protection Act.
Membership Registration and Management:
- To confirm membership intention, identify and authenticate individuals for membership services, manage membership status, prevent fraudulent use, verify consent from a legal representative for processing personal data of children under 14, and handle notifications and complaints.
Provision of Goods or Services:
- To provide services, offer content, provide customized services, verify identity and age, and handle payment and settlement.
Retention and Processing Period of Personal Data
Tishoo Co., Ltd. processes and retains personal data within the period specified by laws and regulations, or the period consented to by the data subject when collecting personal data.
The retention and processing periods for each category of data are as follows:
Website Membership Registration and Management:
- Until the business/organization website account is deleted. However, the retention period may be extended until the end of investigations or legal procedures if they are ongoing.
Provision of Goods or Services:
- Until the goods or services are delivered, and payment and settlement are completed. Records related to transactions, advertising, contracts, and disputes are retained for specific periods as per legal requirements.
Categories of Personal Data Processed
Tishoo Co., Ltd. processes the following personal data:
Membership Registration and Identification:
- Required: Name, Date of Birth, Email Address
- Optional: Area of Interest
Provision of Goods or Services:
- Required: Name, Resident Registration Number, Address, Phone Number, Email Address, Bank Account Information, NDA
- Optional: Area of Interest
Third-Party Provision of Personal Data
Tishoo Co., Ltd. only provides personal data to third parties within the scope outlined in the purpose of processing personal data, and only when required by law or with the consent of the data subject.
Tishoo Co., Ltd. may provide minimal personal data to third parties for service provision with the data subject's consent.
In emergency situations, such as disasters, epidemics, or imminent threats to life or property, personal data may be provided to relevant authorities without consent.
Outsourcing of Personal Data Processing
Tishoo Co., Ltd. outsources personal data processing tasks for efficient management.
Tishoo Co., Ltd. ensures that contracts with third-party processors comply with the Personal Information Protection Act, outlining responsibilities, protective measures, and data handling.
Changes in outsourcing contracts or processors will be promptly disclosed.
Destruction of Personal Data
Tishoo Co., Ltd. will promptly destroy personal data when the retention period expires, or the purpose of processing has been fulfilled.
If retention is required by other laws, the personal data will be stored separately.
The procedure and methods for data destruction include irreversible deletion for electronic files and shredding or incineration for paper documents.
Rights of Data Subjects and Legal Representatives
Data subjects may request access, correction, deletion, or suspension of processing of their personal data at any time.
These requests can be made via written form, email, or fax.
Requests can also be made through a legal representative or authorized agent.
Measures to Ensure the Security of Personal Data
Tishoo Co., Ltd. takes the following measures to ensure the security of personal data:
- Administrative measures: Establishing internal management plans, operating dedicated teams, regular staff training.
- Technical measures: Managing access to personal data processing systems, implementing encryption, installing and updating security programs.
- Physical measures: Controlling access to data storage facilities.
Use of Cookies
Tishoo Co., Ltd. uses cookies to provide customized services by storing and retrieving user information. Cookies help identify usage patterns and offer optimized information. Users can disable cookies in their browser settings, although doing so may affect service usability.
Collection and Use of Behavioral Data
Tishoo Co., Ltd. collects and uses behavioral data to provide personalized services and advertisements. This includes data such as website/app visit history, search history, and purchase history. Collected data is retained for up to 730 days before being destroyed.
Third-Party Use of Behavioral Data
Tishoo Co., Ltd. allows third-party advertisers to collect and process behavioral data for personalized online advertisements. Data retention for these third parties is for up to 365 days.
Protection of Personal Rights
Tishoo Co., Ltd. ensures the protection of personal data and provides means for data subjects to seek assistance in cases of data infringement, including contacting relevant authorities for dispute resolution and counseling.
Changes to the Privacy Policy
This Privacy Policy is effective from September 21, 2024.