This translation is provided for your convenience only. If there is any inconsistency between this translation and the Korean original, the Korean original shall prevail.
The Suwan News (the "Company") strictly complies with the Personal Information Protection Act of the Republic of Korea and related Korean privacy laws, as well as the EU General Data Protection Regulation (GDPR), and follows the OECD privacy guidelines.
Through this Privacy Policy, the Company informs data subjects (users) of the purposes and methods by which the personal information they provide is used and managed.
■ Personal information we collect
The Company collects the following personal information for website sign-up and management.
1. Required items: user name, login ID, password, email address, service usage records, access logs, cookies, access IP information, payment records
2. Optional items: home address, gender, date of birth, bank account number, credit card information
3. Collection methods: website (sign-up, boards, application forms)
■ Purposes of collection and use of personal information
The Company processes personal information for the following purposes. The personal information being processed is not used for any purpose other than those below, and if the purpose of use changes, the Company will take necessary measures, such as obtaining separate consent, in accordance with Article 18 of the Personal Information Protection Act.
1. Website membership sign-up and management
Personal information is processed for the purposes of confirming the intention to sign up, identifying and authenticating users in providing membership services, maintaining and managing membership status, preventing fraudulent use of the Service, and delivering various notices and handling grievances.
2. Handling of inquiries and complaints
Personal information is processed for the purposes of verifying the identity of the complainant, confirming the matter raised, contacting and notifying for fact-finding, and communicating the results.
3. Provision of goods or services
Personal information is processed for the purposes of providing services, providing content, and providing personalized services.
4. Marketing and advertising
Personal information is processed for purposes such as developing new services (products), providing personalized services, providing events and promotional information and opportunities to participate, and analyzing access frequency or compiling statistics on members' use of the Service.
■ Provision and outsourcing of personal information
The Company does not provide users' personal information to government agencies or others for any reason, except where the Company is legally obliged to submit personal information by order of a court in any jurisdiction. If the Company provides user information to a third party, it will disclose that fact through its Transparency Report.
– Provision of personal information to third parties (outsourcing)
The Company entrusts part of the work necessary to provide the Service to outsourced contractors. The Company stipulates and supervises the matters necessary for the entrusted companies to manage personal information safely in accordance with the Personal Information Protection Act. If the Company does not provide personal information to the entrusted companies, the Service may not be available to users.
| Contractor | Entrusted work | Retention and use period |
| Majun Service Co., Ltd. | Service development and operation, backup server development and operation | Until membership withdrawal or the end of the outsourcing contract |
| Google Inc. | AdSense personalized advertising, Analytics | Until membership withdrawal or the end of the outsourcing contract |
| Stripe, Inc. | International payment network | Until membership withdrawal or the end of the outsourcing contract |
| PayPal Pte. Ltd. | International payment network | Until membership withdrawal or the end of the outsourcing contract |
| Naver Corporation | Analytics services (collection of web browser cookies and visitor computer usage information) | Until membership withdrawal or the end of the outsourcing contract |
| Akismet | API for preventing visitor comment spam and removing malicious content | Until membership withdrawal or the end of the outsourcing contract |
| Automattic (WooCommerce) | Sharing of store service updates, service operation information, etc. | Until membership withdrawal or the end of the service |
■ Cross-border transfer of user personal information
The Company may transfer user personal information abroad in certain limited cases, for the purpose of providing the Service and for user convenience. When transferring data abroad, the Company thoroughly implements legal and technical measures to protect personal information and complies with all procedures required by applicable laws.
- Personal information subject to cross-border transfer
The personal information transferred abroad is limited to the minimum information necessary for service operation and technical support purposes.
- Items transferred: name, email address, service usage records
- Purpose of transfer: technical support, service operation
2. Countries to which personal information is transferred and contractors
- Country: United States
- Contractors: Google LLC, Automattic, Akismet, Stripe, Inc., PayPal, Inc.
- Transfer method: data transmission via secure channels (encrypted transfer protocols)
3. Timing of cross-border transfer and retention period
- Timing of transfer: when the Service is used or when a specific technical support request arises
- Retention period: only for the period required by applicable laws or for the purpose of the Service
4. Protective measures for cross-border transfers
The Company takes the following measures so that user personal information receives the same level of protection abroad as it does domestically:
- conclusion of personal information protection agreements with contractors
- application of data encryption and security protocols
- regular review of contractors' level of personal information protection
5. User rights and objections
Users have the right not to consent to the cross-border transfer of their personal information, in which case the use of the Service may be partially restricted.
- Withdrawal of consent and objections: 1533-5835
The Company regards the safety of user personal information as its top priority and will protect personal information through thorough security measures even when it is transferred abroad. Please feel free to contact the Company with any further questions.
■ Retention and use period of personal information
The Company destroys personal information without delay once the retention period has elapsed or the purpose of use has been achieved. However, where preservation is required by applicable laws, the information is moved to and stored in a separate database (DB).
– Items preserved: login ID, payment records
– Basis for preservation: Act on the Use and Protection of Credit Information
– Preservation period: 3 years
– Related laws:
1) Records on display/advertising: 6 months (Act on Consumer Protection in Electronic Commerce)
2) Records on contracts or withdrawal of offers: 5 years (Act on Consumer Protection in Electronic Commerce)
3) Records on payment and supply of goods: 5 years (Act on Consumer Protection in Electronic Commerce)
4) Records on consumer complaints or dispute resolution: 3 years (Act on Consumer Protection in Electronic Commerce)
5) Records on the collection/processing and use of credit information: 3 years (Act on the Use and Protection of Credit Information)
■ Procedure and method of destruction of personal information
– Destruction procedure
The Company destroys personal information for which grounds for destruction have arisen, with the approval of the privacy officer.
– Destruction method
Personal information stored in electronic file form is destroyed using technical methods that make the records unrecoverable.
■ Users' rights and how to exercise them
1. Requests to access, correct or delete personal information:
- Users may request access to, correction of, or deletion of their personal information at any time.
- To view or modify your personal information, use the profile edit function; to withdraw membership, click "withdraw membership" and complete identity verification, after which you can directly view, modify or withdraw. Alternatively, contact the privacy officer by email and we will take the necessary measures immediately in accordance with applicable laws.
2. Procedure for exercising the right to be forgotten:
- If a user wishes to delete information about themselves published online, the following procedure applies:
- How to request: apply to our customer center or privacy officer in writing, by phone, by email, etc.
- Required documents: a copy of an ID card for identity verification, official documents proving bereaved-family status where applicable (e.g., family relation certificate, birth certificate), and details and URLs of the information to be deleted.
- We will inform you of the outcome within 30 days of receiving the request.
3. Limitations on deletion requests:
- Deletion requests may be restricted in the following cases:
- information that must be preserved under applicable laws
- information that needs to be preserved for public interest purposes
- other cases where the deletion request is judged to be unjustified
4. Other rights: Users may withdraw consent to the processing of their personal information or request suspension of processing, following the same procedures as above.
If a user requests the correction of an error in their personal information, the Company will not use or provide that personal information until the correction is completed. If incorrect personal information has already been provided to a third party, the Company will notify the third party of the correction without delay so that the correction is made.
Personal information terminated or deleted at the user's request is handled as specified in "Retention and use period of personal information" and is processed so that it cannot be viewed or used for any other purpose.
■ Installation, operation and refusal of automatic personal information collection devices
The Company uses "cookies" to store and retrieve usage information in order to provide individualized, customized services. Cookies are small text files sent to the user's browser by the server operating the website, and are stored on the user's computer hard disk.
▶ Purposes of cookies
– Analyzing the access frequency and visit times of members and non-members, identifying users' tastes and interests and tracking their activity, and measuring participation in events and number of visits, for targeted marketing and personalized services.
You have a choice regarding the installation of cookies. You can set options in your web browser to allow all cookies, to require confirmation each time a cookie is saved, or to refuse all cookies.
▶ How to refuse cookies
Example: You can refuse cookies by selecting options in your web browser to allow all cookies, to require confirmation each time a cookie is saved, or to refuse all cookies.
Example settings (for Chrome): you can refuse cookie storage in your browser under Tools > Settings > Privacy and security > Cookies and other site data. Note that refusing cookies may limit your use of the Service.
■ Designation of the privacy officer
The Company designates the following department and privacy officer to protect customers' personal information and handle privacy-related complaints.
Privacy officer: Kim Dongju
Department: –
Position: CEO
Email: [email protected]
Users may contact the privacy officer regarding any issues arising while using the Company's services. The Company will respond promptly and fully to user reports.
If you need to report or consult on other privacy infringements, please contact the following organizations:
1. Personal Information Dispute Mediation Committee (www.1336.or.kr / 1336)
2. e-Privacy Mark Certification Committee (www.eprivacy.or.kr / 02-580-0533~4)
3. Supreme Prosecutors' Office Internet Crime Investigation Center (http://icic.sppo.go.kr / 02-3480-3600)
4. National Police Agency Cyber Terror Response Center (www.ctrc.go.kr / 02-392-0330)
■ Notice
If this Privacy Policy needs to be amended and republished, the Company may announce the change through website notices or by individual notification.
However, in the event of significant changes to user rights, such as the purposes of collection or the scope of use of personal information, the Company will give notice at least 30 days in advance and may request additional consent from users.
– Date of change: 2 January 2025
– Date of announcement: 27 March 2015
– Effective date: 27 March 2015