Privacy Policy

Privacy policy

<PAFGYM Inc.> (‘pafgym.com,’ hereinafter the 'PAFGYM website') establishes and discloses this privacy policy pursuant to Article 30 of the Personal Information Protection Act in order to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

○ This Privacy Policy is effective as of January 1, 2022.

Article 1 (Purposes of processing personal information)

<PAFGYM Inc.> ('pafgym.com', hereinafter the 'PAFGYM website') processes personal information for the following purposes. Personal information being processed will not be used for purposes other than those below, and if the purpose of use changes, we will take the necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.

1. Website membership registration and management

We process personal information to confirm membership intent, identify and authenticate members for membership services, maintain and manage membership, prevent misuse of services, and send notices and notifications.

2. Provision of goods or services

We process personal information for the purpose of providing goods or services.

3. Use for marketing and advertising

We process personal information for purposes such as providing event and promotional information and opportunities to participate, providing services according to demographic characteristics, verifying the validity of services, understanding access frequency, and compiling statistics on members' use of services.

Article 2 (Processing and retention period of personal information)

① <PAFGYM Inc.> processes and retains personal information within the retention and use period prescribed by law or the retention and use period consented to by the data subject when the personal information was collected.

Article 3 (Items of Personal Information Processed)

① <PAFGYM Inc.> processes the following items of personal information.

• < Website membership registration and management >

• Required items: email, mobile phone number, gender, date of birth, name, service usage records

Article 4 (Procedures and Methods for Destroying Personal Information)

① <PAFGYM Inc.> destroys personal information without delay when it is no longer necessary, such as when the retention period has expired or the purpose of processing has been achieved.

② Where personal information must continue to be retained under other laws even though the retention period consented to by the data subject has passed or the purpose of processing has been achieved, the personal information is moved to a separate database (DB) or stored in a different location.

③ The procedures and methods for destroying personal information are as follows.

1. Destruction procedure

<PAFGYM Inc.> selects personal information for which a reason for destruction has arisen and destroys it with the approval of <PAFGYM Inc.>'s person in charge of personal information protection.

2. Method of destruction

Information in electronic file form is handled with technical methods that prevent records from being restored.

Personal information printed on paper is destroyed by shredding or incineration.

Article 5 (Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them)

① Data subjects may at any time exercise their rights to request access to, correction of, deletion of, or suspension of processing of their personal information held by <PAFGYM Inc.>.

② The rights under Paragraph 1 may be exercised against PAFGYM Inc. in writing, by email, by facsimile (FAX), or by other means in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and PAFGYM Inc. will take action without delay.

③ The rights under Paragraph 1 may be exercised through an agent, such as the data subject's legal representative or a person delegated by the data subject. In this case, a power of attorney in accordance with Form No. 11 of the “Notice on Methods of Processing Personal Information (No. 2020-7)” must be submitted.

④ Requests for access to and suspension of processing of personal information may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act.

⑤ A request to correct or delete personal information cannot seek deletion where other laws specify that the personal information is subject to collection.

⑥ When a request for access, correction or deletion, or suspension of processing is made under the data subject's rights, PAFGYM Inc. verifies whether the person making the request is the data subject or a legitimate agent.

Article 6 (Measures to ensure the security of personal information)

<PAFGYM Inc. takes the following measures to ensure the security of personal information.

1. Minimizing and training staff who handle personal information: We designate the staff who handle personal information and limit this to the persons in charge, keeping their number to a minimum as a measure for managing personal information.

2. Technical measures against hacking and similar threats

<PAFGYM Inc.> installs security programs and updates and checks them regularly to prevent leakage and damage of personal information by hacking or computer viruses, installs its systems in areas with controlled external access, and monitors and blocks access technically and physically.

3. Encryption of personal information

Users' passwords are stored and managed in encrypted form so that only the user knows them, and important data is protected with additional security measures such as encrypting files and transmitted data or using file-lock functions.

4. Retention of access records and prevention of forgery and alteration

Records of access to the personal information processing system are retained and managed for at least 1 year; however, when personal information is added for 50,000 or more data subjects, or when unique identification information or sensitive information is processed, they are retained and managed for at least 2 years.

We also use security features to prevent access records from being forged, altered, stolen, or lost.

5. Restricting access to personal information

We take the necessary measures to control access to personal information by granting, changing and revoking access rights to the database systems that process it, and we use an intrusion prevention system to block unauthorized access from outside.

6. Use of locks for document security

Documents containing personal information and portable storage media are kept in a secure, locked location.

Article 7 (Installation, operation, and refusal of devices that automatically collect personal information)

① <PAFGYM Inc.> uses 'cookies', which store usage information and retrieve it from time to time, to provide users with individually customized services.

② A cookie is a small piece of information that the server (http) used to operate the website sends to the user's browser, and it may be stored on the hard disk of the user's PC.

a. Purpose of using cookies: Cookies are used to understand how users visit and use each service and website, popular search terms, whether a secure connection is used, and so on, in order to provide users with optimized information.

B. Installation, operation and refusal of cookies: You can refuse cookie storage through the options in Tools > Internet Options > Privacy at the top of your web browser.

c. If you refuse to store cookies, you may have difficulty using customized services.

Article 8 (Chief Privacy Officer)

① <PAFGYM Inc.> designates the following person in charge of personal information protection, who is responsible for overseeing work related to personal information processing and for handling data subjects' complaints and remedies for damages related to personal information processing.

• ▶ Chief Privacy Officer

• Name: Oh Chang-hyeon

• Position: CEO

• Title: CEO

• Contact: 02-575-7051

※ You will be connected to the department in charge of personal information protection.

• ▶ Department in charge of personal information protection

• Department: Management Support Team

• Contact person: Management Support Team

• Contact: 02-575-7051

② Data subjects may direct all inquiries, complaints and requests for remedies related to personal information protection arising from using the services (or business) of <PAFGYM Inc.> to the privacy officer and the responsible department. <PAFGYM Inc.> will respond to and handle data subjects' inquiries without delay.

Article 9 (Department that receives and handles requests to access personal information)

Data subjects may submit a request to access their personal information under Article 35 of the Personal Information Protection Act to the department below.

<PAFGYM Inc.> will make every effort to process data subjects' requests to access personal information promptly.

• ▶ Department receiving and processing requests for access to personal information

• Department: Management Support Team

• Contact person: Management Support Team

• Contact: 02-575-7051

Article 10 (Remedies for infringement of data subjects' rights)

To seek relief from infringement of personal information, data subjects may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Report Center, and others. For other reports of or consultation about personal information infringement, please contact the agencies below.

1. Personal Information Dispute Mediation Committee: 1833-6972 (no area code) (www.kopico.go.kr)

2. Personal Information Infringement Report Center: 118 (no area code) (privacy.kisa.or.kr)

3. Supreme Prosecutors' Office: 1301 (no area code) (www.spo.go.kr)

4. Korean National Police Agency: 182 (no area code) (ecrm.cyber.go.kr)

Anyone whose rights or interests have been infringed by a disposition or omission of the head of a public institution in response to a request under Article 35 (Access to Personal Information), Article 36 (Correction and Deletion of Personal Information), or Article 37 (Suspension of Processing of Personal Information, etc.) of the Personal Information Protection Act may file an administrative appeal as provided by the Administrative Appeals Act.

※ For details on administrative appeals, please refer to the Central Administrative Appeals Commission website (www.simpan.go.kr).

Article 11 (Changes to the privacy policy)

This privacy policy takes effect on January 1, 2022.