1. Principles of Personal Information Collection
KIVA Portal (hereinafter 'the Company') collects information based on the following principles to protect members' personal information while providing appropriate services.
- The Company requires only the minimum necessary information for users to use services most effectively.
- Each member's personal information can only be directly managed by the member themselves.
- The Company's principle is not to disclose members' personal information except in extremely exceptional circumstances (such as legitimate requests from government agencies).
- The Company requires only minimal information to prevent personal information from being misused for commercial and political purposes and to prevent invasion of privacy.
2. Personal Information Requested from Members
To use the various community services provided by the Company, you must enter the following basic required items on the membership registration screen. Items other than those listed below are optional. The Company will not refuse to provide basic services because a user has not filled in optional information.
- ID
- Password
- Name
- Email address
The Company does not collect personal information containing the following items that may significantly infringe on users' basic human rights:
- Race and ethnicity
- Ideology and beliefs
- Place of origin and permanent domicile
- Political orientation and criminal records
- Health status and sexual life
3. Consent and Methods of Personal Information Collection
During membership registration, you can select and click the [Agree] or [Disagree] button regarding the Company's terms of service and privacy policy. Clicking [Agree] is considered consent to the collection of personal information, and personal information will be collected based on the information entered in the registration form.
4. Purpose of Collection and Use of Personal Information
Personal information collected by the Company is used for the following purposes:
- Member service use contracts and performance
- Provision of community services
- Provision of new services or event information
5. Use Beyond Purpose and Sharing with Third Parties
The Company's principle is to never share personal information without the individual consent of each member. However, exceptions are made in the following cases in accordance with relevant laws:
- When there are special provisions in laws such as the Financial Real-Name Transactions and Confidentiality Act, Credit Information Use and Protection Act, Framework Act on Telecommunications, Telecommunications Business Act, Local Tax Act, Consumer Protection Act, Bank of Korea Act, Criminal Procedure Act, etc.
- When necessary for billing related to service provision
- When sharing of some personal information with partner companies is unavoidable for service fulfillment such as product delivery, the Company will always obtain the member's consent.
6. Access, Modification, Update, and Withdrawal of Personal Information
Members of the Company may view, modify, and update their personal information at any time. You can directly modify it by clicking [Change Member Information] on various service screens within the website, or you can request modifications by email to the personal information manager. Members can also withdraw through the [Withdraw Membership] menu on each service screen.
7. Measures for Personal Information Protection
The Company takes the following technical measures for personal information protection:
- Security devices using passwords
- Computer virus prevention using antivirus programs
- Security devices for safe transmission of personal information using encryption algorithms
- Systems and access control devices to block hacking and intrusion
- Other technical devices necessary for ensuring safety
Additionally, the following administrative measures are taken:
- Establishment and implementation of access and management procedures for personal information
- Designation of users of personal information processing systems and regular password updates
- Limiting and designating personal information handlers to minimum personnel
Nevertheless, please be aware that your personal information is basically protected by your password associated with your ID.
Passwords are managed solely by the individual, and the responsibility to maintain confidentiality of passwords rests with the member as stated in the Company's terms of service.
Therefore, please be sure to use a combination of letters and numbers for your ID and password, and it is not advisable to use frequently used or sensitive information such as resident registration numbers or phone numbers. It is also good practice to change your password frequently.
If you share a computer with others through a network or use a computer in a public place, please log out and close the web browser window after accessing the Company's services. If you do not log out properly, your personal information may remain in the browser's temporary storage.
The Company does its best to protect personal information, but is not responsible for damages caused by the member's own mistakes in disclosing their ID and password or problems in internet use.
8. Retention and Use Period of Personal Information
Your personal information will be retained by the Company from the date of registration to the date of withdrawal for the purpose of providing services. Even if you terminate the service agreement and withdraw your membership, personal information may be retained for the necessary period when there are exceptions under laws such as the Commercial Act, when the user's consent has been obtained, or when the retention period has been notified in advance. Examples include litigation, disputes, completion of commercial payment and delivery, etc. Access to and use of personal information during this period is limited to the relevant reason. If there is a need to continue retention after the above period, we will notify you and go through the consent process.
The Company destroys personal information without delay using irreversible technical methods after the purpose of collection or provision has been achieved.
9. Use of Cookies
Cookies are small pieces of information transmitted by a web service provider's server to the user's computer, containing information about visited websites and the user's personal information. Cookies identify the user's computer web browser but do not personally identify the user, and users can set whether to accept cookies through the web browser's options menu.
The Company uses cookies to facilitate the authentication process necessary for members' service use. The Company also strives to provide higher quality services by understanding member size, usage frequency, and interests through cookies.
10. Other Matters
The Company does its best to create a healthy internet site. To this end, posts may be monitored to identify problematic members who engage in conduct or behavior that violates public morals or causes harm to other members.
For member personal information management, only a very limited number of employees authorized by the Company have access, and the Company does its best to protect members' personal information.
11. Personal Information Manager
The Company designates a manager responsible for collecting opinions and handling complaints regarding personal information as follows:
- Name: Junho Hwang
- Email: evp1110@naver.com
- Phone: 010-7127-1768
12. Handling of Complaints and Disputes Related to Personal Information
For inquiries or complaints related to personal information, please file with the above contact or the Privacy Infringement Reporting Center (http://www.cyberprivacy.or.kr, Phone: 02-1336) operated by the government. For disputes regarding personal information, please refer the matter to the Personal Information Dispute Mediation Committee within the Korea Information Security Center.