O2Bio Co., Ltd. ('Our Website') has established the following processing policy in accordance with the Personal Information Protection Act to protect users' personal information and rights and to smoothly process users' complaints related to personal information.
'Our Website' will notify users through website notices (or individual notices) when revising the personal information processing policy.
○ This policy will be effective from January 7, 2025.
1. Purpose of personal information processing
'Our Website' processes personal information for the following purposes. The processed personal information will not be used for purposes other than the following, and prior consent will be obtained if the purpose of use is changed.
A. Processing of product inquiry consultations
Personal information is processed for the purpose of verifying the applicant's identity, notifying the processing result, etc.
B. Provision of goods or services
Personal information is processed for the purpose of providing services, etc.
2. Creation of personal information items to be processed
'Our Website' processes the following personal information items.
A. - Required items: Company name, name, phone number, email 3. Rights, obligations, and methods of exercising the information subject Users may exercise the following rights as personal information subjects. A. Information subjects may exercise the following personal information protection rights regarding ‘Our Website’ at any time. ① Request to view personal information ② Request for correction in case of errors, etc. ③ Request for deletion ④ Request for suspension of processing B. The exercise of rights under ‘A’ may be made to ‘Our Website’ in writing, by e-mail, facsimile (FAX), etc. in accordance with the format of Appendix 8 of the Enforcement Regulations of the Personal Information Protection Act, and ‘Our Website’ will take action without delay. C. If the information subject requests correction or deletion of personal information due to errors, etc., ‘Our Website’ will not use or provide the personal information in question until the correction or deletion is completed. D. The rights under Article 'A' can be exercised through a legal representative or agent of the information subject. In this case, a power of attorney in the format of Appendix 11 of the Enforcement Regulations of the Personal Information Protection Act must be submitted. 4. Destruction of Personal Information In principle, 'Our Website' destroys the relevant personal information without delay when the purpose of processing personal information is achieved. The procedures, deadlines, and methods for destruction are as follows. - Destruction Procedure The information entered by the user is transferred to a separate DB (separate documents in the case of paper) after the purpose is achieved and stored for 3 years (in the case of technical support applications) or immediately destroyed (in the case of education applications and online consultations) in accordance with internal policies and other relevant laws. In this case, the personal information transferred to the DB will not be used for any other purpose unless required by law. - Destruction Period When the retention period of personal information has expired, personal information of users will be destroyed within 5 days from the end of the retention period. When personal information becomes unnecessary due to the achievement of the purpose of processing personal information, the discontinuation of the relevant service, or the termination of the business, the personal information will be destroyed within 5 days from the date when the processing of personal information is deemed unnecessary. - Destruction Method Information in the form of electronic files uses a technical method that cannot reproduce the record. 5. Measures to ensure the security of personal information In accordance with Article 29 of the Personal Information Protection Act, ‘Our website’ is taking the following technical/administrative and physical measures necessary to ensure security. A. Regular self-audits In order to ensure the stability of personal information handling, we are conducting self-audits on a regular basis (once a year). B. Minimization and training of personal information handling staff We are implementing measures to manage personal information by designating and limiting the number of staff handling personal information to a minimum. C. Technical measures against hacking, etc. In order to prevent personal information leakage and damage due to hacking or computer viruses, etc., ‘Our website’ installs security programs and conducts periodic updates and inspections, and installs systems in areas with controlled access from the outside and conducts technical/physical monitoring and blocking. D. Access control for unauthorized persons Access control procedures are established and operated for physical devices that store personal information. 6. Contact information for the personal information manager and person in charge You may report any complaints related to personal information protection that arise while using the provider’s services to the personal information manager or the department in charge. The provider will promptly and sufficiently respond to users’ reports. Personal information manager Tel: +82-41-584-0203 If you need to report or consult about other personal information infringements, please contact the following organizations. - Personal Dispute Mediation Committee (www.1336.or.kr / 1336) - Information Protection Mark Certification Committee (www.eprivacy.or.kr / 02-580-0533~4) - Supreme Prosecutors' Office Advanced Crime Investigation Division (http://www.spo.go.kr / 02-3480-2000) - National Police Agency Cyber ​​Terror Response Center (www.ctrc.go.kr / 02-392-0330) 7. Personal Information Protection for Children Under 14 Years of Age Children under 14 years of age must obtain the consent of their legal representative before registering as members. The legal representative may request the company to view, correct, delete some of the child's personal information, withdraw consent, etc. at any time, and the company must take necessary measures without delay in response to such requests. 8. Other Please be informed that this "Personal Information Handling Policy" does not apply to the collection of personal information by websites linked to this site. 9. Obligation to notify If there are additions, deletions, or modifications to the current personal information handling policy, we will notify you through the 'Notice' section of the website at least 7 days prior to the revision. - Announcement date: January 7, 2025 - Effective date: January 7, 2025