According to the Personal Information Protection Act, RainbirdGEO (hereinafter referred to as the “Company”) has the following privacy policies to protect users’ personal information, rights and interests, and to smoothly handle user complaints related to personal information. When the company revises its privacy policy, it will be notified through the web page notice (or individual notice).
○ This policy will take effect on August 3, 2020.
1. Purpose of processing personal information
The company processes personal information for the following purposes. The processed personal information is not used for any purpose other than the following purposes, and prior consent will be sought if the purpose of use is changed.
① Web page membership signing up and management
Personal information is processed for the purpose of verifying the intention of membership and identifying and certifying oneself according to the provision of membership service.
② Provision of goods or services
Personal information is processed for the purpose of disaster alerting, etc.
③ Location Data Usage
Location data is processed for providing location-based disaster alerts and related services.
2. Status of personal information files
① Personal information file name: User’s personal information
– Personal information items: Email, mobile phone number, gender, name, occupation, physical information, blood type,medication, location data
– Collection method: web page and application
– Basis for retention: Consent of information subjects
– Retention period: 3 years
– Relevant laws: Records on collection/processing and use of credit information: 3 years
3. Processing and retention period of personal information
① The company processes and retains personal information within the period of retention and use of personal information according to laws or the period of retention and use of personal information agreed upon when collecting personal information from you.
② Each personal information processing and retention period is as follows.
1. <Registration and Management of Web Page Membership>
Personal information related to <Registration and Management of Web Page Membership> is kept and used for the purpose of the above use from the date of consent for collection and use to <3 years>.
– Basis for retention: Consent of information subjects
– Relevant laws: Records on the collection, processing, use, etc. of credit information: 3 years
– Exception Reason :
4. User rights
Users of the rights, duties, and methods of exercise of information subjects and legal representatives may exercise the following rights as personal information subjects
① You can exercise your right to view, correct, delete, or request suspension of processing of personal information to the company.
② The exercise of rights under paragraph ① can be carried out through written, e-mail, or facsimile (FAX) pursuant to Article 41 paragraph 1 of the Enforcement Decree of the Personal Information Protection Act, and the company will take action without delay.
③ The exercise of rights under paragraph ① may be carried out through your legal representative or through your delegation. In this case, you must submit a power of attorney in attached Form 11 of the Enforcement Rules of the Personal Information Protection Act.
④ Requests for personal information access and suspension of processing may restrict your rights under Articles 35 paragraph 5 and Article 37 paragraph 2 of the Personal Information Protection Act.
⑤ A request for correction or deletion of personal information cannot be requested if the personal information is specified as a target for collection in other statutes.
⑥ The company verifies that the person who made the request for perusal according to your rights, correction or deletion, or suspension of processing, is the person who made the request.
5. Items of personal information processed
① The company processes the following personal information items.
1. RBG App
• Essential
E-mail, date of birth, gender, blood type, location data
• Optional
Weight, height, medical information.
2. RBG Office
• E-mail, agency
6. Disposal of personal Information
In principle, the company destroys the personal information without delay if the purpose of personal information processing is achieved. Procedure, deadline, and method for revocation are as follows.
① Destruction procedure
The information entered by the user is transferred to a separate DB after achieving the purpose (in case of paper, separate documents) and destroyed immediately after being stored for a certain period of time in accordance with the internal policy and other related statutes. At this time, personal information transferred to DB is not used for any other purpose except by law.
② Deadline for destruction
The user’s personal information shall be destroyed within five days from the end of the retention period, or within five days from the date the personal information is deemed unnecessary, such as achieving the purpose of processing personal information, abolishing the relevant service, or terminating the project.
③ Method of destruction
Electronic file-type information uses technical methods that cannot play records.
7. Matters concerning the installation, operation and rejection of personal information collection devices
RainbirdGEO doesn’t use ‘cookies’ that store your information and get it from time to time.
8. Preparation of a person responsible for personal information protection
① The company is in charge of handling personal information and appoints a person in charge of personal information protection as follows for handling complaints and damage relief related to personal information processing.
• Personal Information Protection Officer
Name: Choi, Yong-Sang
Duty: Integrator
Position: Executive Director
Contact: 02-3277-4461, support@rainbirdgeo.com
※ It is connected to the department in charge of location information management.
• Personal Information Protection Officer
The person in charge: Lee, Do-Hun
Contact: 02-3277-4461, support@rainbirdgeo.com
② You can inquire about all personal information protection related inquiries, complaints, damage relief, etc. that occurred while using the company’s services to the department in charge of personal information protection. The company will answer and process your inquiries without delay.
9. Revision of privacy policy
This privacy policy is applied from the enforcement date, and if there is any addition, deletion, or correction of changes in accordance with statutes or policies, it will be notified through a notice 10 days before the implementation of the changes.
10. Measures to ensure the safety of personal information
In accordance with Article 29 of the Personal Information Protection Act, the company takes technical, administrative and physical measures necessary for securing safety as follows.
① Minimization and training of personnel handling personal information
We are implementing measures to manage personal information by designating employees who handle personal information and minimizing them by limiting them to the person in charge.
② Establishment and implementation of an internal management plan
We have established and implemented an internal management plan for safe handling of personal information.
③ Technical measures against hacking, etc.
The company installs a security program to prevent leakage and damage of personal information due to hacking or computer viruses, periodically updates and checks, installs a system in an area where access is controlled from outside, and monitors and blocks technically and physically.
④ Access control for unauthorized personnel
We have a separate physical storage area for personal information and establish and operate access control procedures.
⑤ Location Data Processing
In addition to the above, the company processes location data for providing location-based services, including disaster alerting and other location-specific notifications.
• Purpose of Location Data Processing
The primary purpose of processing location data is to provide accurate and timely disaster alerts based on the user’s location.
• Collection of Location Data
Location data is collected through GPS, Wi-Fi, and IP address when the user interacts with the application.
• Use of Location Data
Location data is used exclusively for providing location-based alerts and notifications, and will not be used for any other purposes without user consent.
• Retention of Location Data
Location data is retained for the duration necessary to provide the location-based services and is deleted immediately upon achieving its purpose or upon user request.
• Sharing and Disclosure
Location data is not shared with third parties except as required by law or with the user’s explicit consent.
• User Rights
Users have the right to request access to, correction of, or deletion of their location data. Users can also withdraw consent for location data processing at any time, which may impact the functionality of location-based services.
• Security Measures
We employ encryption and access controls to protect location data and ensure it is only accessible to authorized personnel for the purposes stated above.