Consent to collection and use of personal information
[Personal Information Policy]  
('https://play.google.com/store/apps/details?id=com.asapp.emp_eng' or 'Android App') is processing personal information for the following purposes. , Do not use for purposes other than the following. 
 
Confirmation of customer's intention to join, identification/authentication of identity according to the provision of services to customers, maintenance and management of membership, payment of amount according to supply of goods or services, supply and delivery of goods or services, etc. 

The services provided by Woojin Plaimm Co., Ltd. collect and use personal information for the following purposes, and do their best to safely handle the personal information of members.
[Mandatory] Provision of basic service functions
Purpose“Providing A/S service for customer identification and customer information management in service”
This is the minimum personal information required to provide the service. So the customer must agree to use.
For further details, please refer to the personal information processing policy.

What is the personal information processing policy ?
Woojin Plaimm Co., Ltd. (hereinafter referred to as the “Company”) collects, uses and provides personal information based on the user's consent, and guarantees the user's right (the right to self-determining personal information) actively.
The company complies with the relevant laws and regulations of the Republic of Korea, personal information protection regulations, and guidelines that information communication service providers must comply with.
The “Personal Information Processing Policy” refers to guidelines that the company must abide by in operating the service to protect users' valuable personal information and use the service with confidence.

Collection of personal information
All users who purchase the company's products can use the service provided by the company, and receive more various services through membership registration.
When collecting user's personal information, the company must notify the user in advance and seek consent of the user.
How do we collect personal information?
when the user agrees to the collection of personal information and directly enters the information in the process of signing up and using the service,
Product registration through the customer support center.

1. The company collects minimum personal information necessary to provide services.
Essential information: Information to perform the essential function of the service
Optional Information: Information collected in order to provide additional functions in addition to the essential functions of the service.
 (There is no restriction on the use of the service even if the optional information is not entered.)

2. We do not collect sensitive information without the user’s consent.
What is sensitive information? : Information that may infringe the privacy of users (race, ideology and creed, politial inclination or criminal record, medical information, etc.)
What kinds of personal information does the company collect?
The company collects following personal information when registering as a member.

3. Customer A / S application
(Mandatory) Personal information: name, mobile phone number, email, office address, job title, identification information of personal device, access log-in number, transaction record, IP information, cookie
(Mandatory) Corporate information: company name, tax number, contact information, registered office address, representative’s name, registered product information, A/S service usage history

Destruction of personal information
Criteria for destruction of collected personal information
In principle, user’s personal information is to be destroyed without delay when the purpose of collecting and using personal information is achieved. The procedures and methods to destroy the personal information are as follows.
In case of electronic files, it is safely deleted so that it cannot be recovered and reproduced, and other records, prints, and writings are shredded or incinerated or destroyed.
However, in accordance with the internal policy to prevent disputes caused by illegal use of the service, records of illegal use are retained for one year and then destroyed in accordance with the process as above.
The company separately stores and manages or destroys personal information of long-term unused members who have not used the service for one year in accordance with laws and regulations and the “personal information expiration date”.
Separately stored personal information is destroyed after 4 years without delay.
However, if the statute imposes an obligation to store information for a certain period, personal information will be kept safely for that period.

1. Service login record
Lawful background for Retention: Communication Secrets Protection Act
Retention period: 3 months

2. Records of consumer’s complaints or disputes
Lawful backgrounds for preservation: Act on Consumer Protection in Electronic Commerce, etc.
Retention period: 3 years

3. Records on contract or withdrawal of subscription / Records on payment and supply of goods, etc.
Lawful backgrounds for preservation: Act on Consumer Protection in Electronic Commerce, etc.
Retention period: 5 years

4. Bookkeeping and supporting documents for all transactions prescribed by tax law
Law backgrounds for Preservation: Framework Act on National Taxes
Retention period: 5 years

5. Records of Electronic Financial Transactions
Lawful backgrounds for retention: Electronic Financial Transactions Act
Retention period: 5 years

Miscellaneous
The rights of users are protected as follows.
Users and their legal representatives may request to view, correct, consent to withdraw or delete the consent, or stop processing of collected information at any time.
However, withdrawal or deletion of consent may limit the use of part or all of the services.

① Request to view and provide personal information
The users can request to view and the company to provide personal information of users who are being processed by the company.
Member information can be found in the mobile app (App)> Menu> MY PAGE
If the users wish to view personal information which cannot be viewed through the service, the company will take action within 30 working days if the users contact the customer service center.
If there is specific reason to delay to release the information or to make it impossible, the company will inform to the users immediately.

② Request for correction / deletion of personal information 
The users can request correction / deletion of personal information of users processed by the company.
Member information can be processed by using the mobile app (App)> Menu> MY PAGE or customer service center. 
For this end, procedures such as identification of users may be performed.

③ Withdrawal of personal information consent, deletion, suspension of processing
The user can request withdrawal, deletion, or suspension of consent for the information collected and used through the customer service center. However, upon such a request, use of part or all of the services may be restricted.
It may be difficult to withdraw, delete or suspend the Information collected according to other laws and regulations.
When a user requests for correction of an error in personal information, the user may not be able to use or to be provided the information until the correction is completed.
If the personal information containing error has already been provided to a third party, the company will take action to notify corrected information to the 3rd party.
The users who install or operate cookies may refuse this.
The company make effort to protect users' valuable personal information.
The company regards the user's personal information as the most valuable value and makes following efforts in handling personal information.
The company encrypts the user’s personal information.

-The company transmits the user's personal information using an encrypted communication section, and stores important information such as passwords encrypted.
The company is trying to protect against hacking and computer viruses.
-The company installs a system in an restricted area where access is controlled from the outside to prevent the user's personal information from being leaked or damaged by hacking or computer viruses.
-The company is trying to prevent the system from being infected with the latest malware or viruses by installing an antivirus program.
-Also, the company is continuously researching and applying new anti-hacking / security technology to the services.  
The company minimizes the number of personnel who can access valuable personal information.
-The company minimizes the employees handling personal information.
-In addition, the company established a systematic standard for the creation and change of passwords for the database system that stores personal information and the system that handles personal information, and the right to access, which has been audited continuously.
-The company has provided regular training to its employees about the protection of user’s personal information.

The company operates a dedicated organization to protect personal information.
Users can inquire to the Personal Information Protection Officer and Customer Support Center about any inquiries, complaints, damage, relief, etc.
related to personal information protection that occurred while using the service (or business) provided by the company. 
The company will respond and process without any delay.


Contact point of Personal information protection officer
Personal information protection officer (company owner, representative, director.- If there is no director, the head of the department responsible for handling personal information)
Name: Youngchan Lee Position: Director Department: Planning and Management Office
Phone : 043-540-9110, e-mail : info@wjpim.com  overseas representative : email 
Department responsible for handling personal information : Customer Support center
Phone: 1644-0990, e-mail: cs@wjpim.com

Other additional policy
If there is any addition, deletion, or modification of the above contents, the company will notify users through the notice 7 days prior to the implementation of the change.
However, we will notify users at least 30 days prior to any changes that are important to users’ valuable rights or obligations.
In addition, if there is an unavoidable need to change the processing policy due to related laws or company policies,the company will notify users as quickly as possible through the notice bulletin.