Masaimara Corporation
Personal information processing policy
Masaimara Co., Ltd. (hereinafter referred to as "Company") establishes and discloses the following personal information processing policy in order to protect the personal information of the data subject and to quickly and smoothly handle related difficulties under Article 30 of the Personal Information Protection Act.
1. Purpose of processing personal information
The "company" processes personal information for the following purposes: The personal information being processed is not used for any purpose other than the following purposes, and if the purpose of use is changed, the reason and contents of the change are immediately notified through the website or service screen in accordance with Article 18 of the Personal Information Protection Act.
A. Civil complaint handling Personal information is processed for the purpose of identifying the civil petitioner, confirming civil complaints, and contacting and notification for fact-finding.
B. Personal information is processed for the purpose of providing goods or services services, providing contents, providing customized services, and paying and settling charges.
C. Use in marketing and advertising Process personal information for the purpose of developing new services (products) and providing customized services, providing event and advertising information and participation opportunities, validating services, identifying access frequencies, or statistics on users' use of services.
2. Processing and retention period of personal information
The "company" processes and holds personal information within the period of holding and using personal information or the period of holding and using personal information agreed upon when collecting personal information from the information subject under the Act. Each personal information processing and retention period is as follows.
1) Processing of civil affairs Personal information related to handling civil affairs shall be held and used for the purpose of use above until <3 years> from the date of consent for collection and use.
- Grounds for Holding: Act on Consumer Protection in Electronic Commerce
- Related Acts and subordinate statutes: records of consumer complaints or disputes: 3 years
2) Provision of goods or services
Personal information related to the provision of goods or services shall be retained and used for the above purpose of use from the date of consent to collection and use to <5 years>.
- Grounds for Holding: Act on Consumer Protection in Electronic Commerce
- Related Acts and subordinate statutes: records of payment and supply of goods, etc.: 5 years
3) Leverage for marketing and advertising
Personal information related to the use of marketing and advertising shall be retained and used for the above purpose from the date of consent to collection and use to <6 months>.
- Grounds for Holding: Act on Consumer Protection in Electronic Commerce
- Related Acts and subordinate statutes: Records of indications/advertisements: 6 months
3. Provision of personal information to third parties
In principle, the "company" does not provide the user's personal information to the outside world. However, exceptions are made in the following cases.
A. If the prior consent of the information subject is obtained
B. Where there are special provisions in other laws;
4. Items of personal information processed
"Company" is processing the following personal information items:
A. Providing goods or services
- Required items: service usage record, access log, cookie, access IP information, payment record
B. Use of the service
- Required items: service use and access record, authentication record, payment record, app version, terminal information (model name, OS type and version, device unique number, etc.)
C. Handling of civil complaints
- Required items: service usage record, access log, cookie, payment record, e-mail, mobile phone number
D. Use in marketing and advertising
- Required: Location information
5. Destruction of personal information
A. The "Company" destroys personal information without delay when personal information becomes unnecessary, such as the expiration of the personal information retention period and the achievement of the purpose of processing.
B. The procedure and method of destroying personal information are as follows.
1) The destruction procedure "Company" selects personal information in which the reason for destruction occurs, and destroys personal information with the approval of the person in charge of personal information protection of the "Company".
2) Destruction Method Information in electronic file types uses a technical method that cannot play recordings. The personal information printed on the paper is destroyed by grinding or incineration.
C. Request to delete data Users can request the company to delete their personal information at any time. If the user requests the deletion of the data, the company will delete the data without delay according to the procedures and methods described above. The deletion request will be made through the company's email account cs@masaimara.app
Personal information processing policy implementation date: May 5, 2022