Privacy Policy

In accordance with the Personal Information Protection Act, AICU Co., Ltd. (hereinafter "AICU") discloses the following information regarding the personal information collected from individuals applying for membership, the purpose of collection and use, the retention and usage period, and the right to refuse consent along with the disadvantages of refusal.

Article 1 (Purpose of Collection and Use of Personal Information)

■ AICU collects and uses personal information solely for the following purposes:

• Confirmation of intent to join, user identification, and other membership management tasks.
• Analysis of service usage records, access frequency, and statistics related to service usage.
  
  

Article 2 (Items of Personal Information to be Collected)

■ AICU collects the minimum personal information necessary for users to utilize the service.
■ The personal information collected from users at the time of membership registration is as follows:

• At the time of membership registration, authentication is performed via SNS methods such as Google login, and "email and name" are collected as mandatory items.
• During the use of the service, service usage records and device information may be generated and collected.
  
  

Article 3 (Retention and Usage Period of Personal Information)

■ AICU destroys collected personal information without delay upon termination of service use, such as membership withdrawal.

Article 4 (Provision of Personal Information to Third Parties)

■ AICU does not provide personal information to third parties without the prior consent of the data subject. However, personal information may be provided to third parties in cases stipulated under Article 17 of the Personal Information Protection Act, such as when required by specific legal provisions or to comply with legal obligations.

Article 5 (Possibility of Disclosure of Sensitive Information and Methods to Opt Out)

■ AICU does not disclose sensitive information that is deemed to pose a risk of privacy infringement during the provision of the service.

Article 6 (Entrustment of Personal Information Processing)

■ For the smooth processing of personal information, AICU entrusts personal information processing tasks as follows:

• Entrusted Party (Trustee): Google LLC, Inc.
• Purpose of Entrustment: Data storage and infrastructure management.

■ When entering into an entrustment contract, AICU specifies in writing, in accordance with Article 26 of the Personal Information Protection Act, matters such as the prohibition of processing personal information beyond the purpose of the entrusted tasks, technical and managerial safeguards, restrictions on re-entrustment, management and supervision of the trustee, and liability for damages. AICU supervises the trustee to ensure the safe handling of personal information.
■ If the content of the entrusted tasks or the trustee changes, AICU will disclose this through this Personal Information Processing Policy without delay.

Article 7 (Overseas Transfer of Personal Information)

■ Not applicable.

Article 8 (Destruction of Personal Information)

■ AICU destroys personal information without delay when it becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose.
■ If personal information must be retained despite the expiration of the consented retention period or achievement of the processing purpose due to other legal requirements, such personal information will be transferred to a separate database (DB) or stored in a different location.
■ The procedures and methods for destroying personal information are as follows:

• Destruction Procedure: Personal information subject to destruction is selected, and destruction is carried out with the approval of the personal information protection officer.
• Destruction Method: Personal information recorded or stored in electronic file format is destroyed using technical methods that prevent reproduction, while personal information recorded or stored on paper documents is destroyed by shredding or incineration.
  
  

Article 9 (Rights and Obligations of Data Subjects and Methods of Exercise)

■ Data subjects may exercise the following personal information protection rights with respect to AICU at any time:

• Request access to personal information.
• Request correction in case of errors.
• Request deletion.
• Request suspension of processing.

■ These rights can be exercised by submitting a request to AICU in writing or via email, and AICU will take action without delay. Additionally, AICU verifies whether the individual requesting access, correction, deletion, or suspension of processing is the data subject or a legitimate representative.
■ If a data subject requests correction or deletion of errors in personal information, AICU will not use or provide such personal information until the correction or deletion is completed.
■ Rights may be exercised through a legal representative or an authorized agent of the data subject. In such cases, a power of attorney in the format prescribed by Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
■ Data subjects must not infringe upon their own or others’ personal information or privacy processed by AICU in violation of the Personal Information Protection Act or other relevant laws.
■ Requests for access or suspension of processing may be restricted under Article 35(4) or Article 37(2) of the Personal Information Protection Act.
■ If personal information is specified as a collection target under other laws, it may not be deleted even upon request.

Article 10 (Measures to Ensure the Security of Personal Information)

■ In accordance with Article 29 of the Personal Information Protection Act, AICU takes the following measures to ensure the security of personal information:

• Administrative Measures: Establishment and implementation of an internal management plan, regular employee training, etc.
• Technical Measures: Management of access rights to the personal information processing system, encryption of personal information, installation of security programs.
• Physical Measures: Locking and access control of locations where personal information is stored.
  
  

Article 11 (Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

■ AICU uses "cookies" to store and retrieve usage information to provide personalized services to users and ensure stable operation of the website.
■ Cookies are small pieces of information sent by the server (http) operating the website to the user’s computer browser and may be stored on the user’s PC hard disk.

• Purpose of Cookies: To identify visit and usage patterns of services and websites, security access status, etc., to provide optimized information to users.
• Installation, Operation, and Refusal of Cookies: Users can refuse cookie storage by adjusting options in the [Tools] > [Internet Options] > [Privacy] menu at the top of the web browser.
• Refusing cookie storage does not cause difficulties or disadvantages in using the website.
  
  

Article 12 (Personal Information Protection Officer)

■ AICU designates a personal information protection officer to oversee personal information processing tasks and handle data subjects’ complaints and damage relief related to personal information processing as follows:

• Personal Information Protection Officer
  • Name: Eunah Hwang
  • Position: CEO
  • Email: aicu.contact@gmail.com

■ Data subjects may contact the personal information protection officer regarding any inquiries, complaints, or damage relief related to personal information protection arising from the use of AICU’s services. AICU will respond to and address such inquiries without delay.

Article 13 (Criteria for Additional Use or Provision Without Consent)

■ Whether it is related to the original purpose of collection.
■ Whether additional use or provision of personal information is predictable based on the circumstances of collection or processing practices.
■ Whether it unjustly infringes on the interests of the data subject.
■ Whether necessary security measures, such as pseudonymization or encryption, have been implemented.

Article 14 (Remedies for Infringement of Rights)

■ Users may contact not only AICU’s personal information protection department but also the following organizations for reporting or consultation regarding personal information breaches:

• Personal Information Dispute Mediation Committee (www.kopico.go.kr / 1833-6972 (toll-free))
• Personal Information Infringement Report Center (privacy.kisa.or.kr / 118 (toll-free))
• Supreme Prosecutors’ Office Cybercrime Investigation Division (www.spo.go.kr / 1301 (toll-free))
• National Police Agency Cyber Safety Bureau (cyberbureau.police.go.kr / 182 (toll-free))