OKESTRO
Privacy Policy

Download Previous Version

OKESTRO complies with the Personal Information Protection Act and related laws and regulations to protect the freedom and rights of information subjects, lawfully processing and securely managing personal information. Pursuant to Article 30 of the Personal Information Protection Act, OKESTRO establishes and discloses a privacy policy to inform information subjects of the procedures and standards for processing personal information, and to promptly and smoothly address related grievances.

Purpose of processing personal information, items collected, retention and use period.

OKESTRO processes the personal information of the data subject as follows:

Customer using the website

Service Purpose of collection Items collected Retention and use period
Customer inquiries Processing of confirming the inquirer, replying to inquiries, etc. [Required] Name, email address, phone number, inquiry content Until 3 years after the inquiry or withdrawal of consent
※However, it is stored according to the legal obligation retention period.
Statistics on performance information and development of new services Statistical information on product/service usage performance, development of new services [Required] Various automatically generated information and service usage records generated during service usage (app usage history, search history, records of improper use, access logs, cookies), information such as posts/other contents created by the data subject, device information (OS/screen size, device ID), IP address Until 3 years after inquiry or withdrawal of consent
※However, it is stored according to the legal obligation retention period
Promotion and marketing Providing services and advertising based on statistical characteristics, providing advertising (customized) information [Optional] Name, Email Address, Phone Number Until 3 years after inquiry or withdrawal of consent
Service Purpose of collection
Customer inquiries Processing of confirming the inquirer, replying to inquiries, etc.
Statistics on performance information and development of new services Statistical information on product/service usage performance, development of new services
Promotion and marketing Providing services and advertising based on statistical characteristics, providing advertising (customized) information
Items collected Retention and use period
[Required] Name, email address, phone number, inquiry content Until 3 years after the inquiry or withdrawal of consent
※However, it is stored according to the legal obligation retention period.
[Required] Various automatically generated information and service usage records generated during service usage (app usage history, search history, records of improper use, access logs, cookies), information such as posts/other contents created by the data subject, device information (OS/screen size, device ID), IP address Until 3 years after inquiry or withdrawal of consent
※However, it is stored according to the legal obligation retention period
[Optional] Name, Email Address, Phone Number Until 3 years after inquiry or withdrawal of consent

Job Applicant

Service Purpose of collection Items collected Retention and use period
Job Application Verification of the applicant's identity, progress and management of the hiring process, verification of experience and qualifications, decision and notification of hiring status, verification of past application history, confirmation of intention to apply for additional hiring [Required] Name, mobile phone number, email address, date of birth, educational background, military service, work experience, foreign language, and other qualifications.
[Optional] Photo, reason for application, other notes 		(If not hired) Up to 3 years after notification of rejection
※However, in cases where it must be preserved rather than destroyed in accordance with relevant laws and regulations, it will last until the relevant period.
Service Purpose of collection
Job Application Verification of the applicant's identity, progress and management of the hiring process, verification of experience and qualifications, decision and notification of hiring status, verification of past application history, confirmation of intention to apply for additional hiring
Items collected Retention and use period
[Required] Name, mobile phone number, email address, date of birth, educational background, military service, work experience, foreign language, and other qualifications.
[Optional] Photo, reason for application, other notes 		(If not hired) Up to 3 years after notification of rejection
※However, in cases where it must be preserved rather than destroyed in accordance with relevant laws and regulations, it will last until the relevant period.

※ Information subject to retention and disposal after a certain period in accordance with legal obligations is as follows.

Legal Basis Data Retention Retention Period
Article 6 of the Act on Consumer Protection in Electronic Commerce, etc. and Article 6 (1) of the Enforcement Decree Contract or subscription cancellation, payment, supply records of goods, etc. 5 years
Records of consumer complaints or dispute resolution 3 years
Records of display/advertisement 6 months
Framework Act on National Taxes Books and supporting documents for all transactions stipulated by tax laws 5 years
Article 22 (1) of the Electronic Financial Transaction Act and Article 12 (1) of the Enforcement Decree Records of electronic financial transactions 5 years
Article 15-2 of the Communications Secrets Protection Act and Article 41 (2) 2 of the Enforcement Decree Service visit records 3 months
Article 20 (2) of the Act on Use and Protection of Credit Information Records of collection, processing, and use of credit information 3 years
Article 71 of the Value Added Tax Act Issuing tax invoices to those who have received goods and services 5 years
Recruitment process (if there are preferential conditions) Disabled status, veteran status, elderly person status Disabled Welfare Act, Disabled Employment Promotion and Vocational Rehabilitation Act, Act on Honorable Treatment and Support of Persons of National Merit, etc.

Provision of personal information to third parties

  • OKESTRO processes the personal information of the information subject only within the scope specified in the purpose of processing personal information, and personal information is only processed in cases that fall under Articles 17 and 18 of the Personal Information Protection Act, including the consent of the information subject and special provisions of the law. is provided to a third party, and other than that, the personal information of the information subject is not provided to a third party.
  • OKESTRO does not currently provide personal information to third parties.
  • In accordance with the “Personal Information Processing and Protection Rules in Emergency Situations” jointly announced by government-related ministries, OKESTRO handles emergency situations such as disasters, infectious diseases, incidents/accidents causing imminent life or physical danger, and imminent property loss. In this case, personal information may be provided to relevant organizations without the consent of the information subject. For more details, please click here*.

In this case, OKESTRO will provide only the minimum necessary personal information in accordance with applicable laws and will not provide it for purposes other than those intended.

※ Information and communication service provider
A telecommunications business operator under Article 2, Paragraph 8 of the Telecommunications Business Act and a person who provides information or mediates the provision of information by using the telecommunications service of a telecommunications business operator for profit purposes

Entrustment of personal information processing

  • To ensure smooth personal information processing. OKESTRO entrusts the following personal information processing tasks.
    Person who is entrusted (trustee) Consignment work Retention and use period
    Stibee Co.,Ltd Email sending and management tasks. Until membership withdrawal or end of consignment contract (processing is entrusted only when the user uses the service)
  • When concluding a consignment contract, OKESTRO prohibits the processing of personal information for purposes other than the purpose of performing the entrusted work in accordance with Article 26 of the Personal Information Protection Act, technical and managerial protection measures, restrictions on re-entrustment, management and supervision of the consignee, and matters related to responsibility such as compensation for damages. Is specified in documents such as contract, and we supervise whether the trustee handles personal information safely.
  • If the details of the entrusted work or the trustee changes, we will disclose it through this personal information processing policy without delay.

Destruction of personal information

  • When personal information becomes unnecessary, such as when the personal information retention period has expired or the purpose of processing has been achieved, OKESTRO destroys the personal information without delay.
  • In cases where personal information must continue to be preserved pursuant to other laws and regulations despite the expiration of the personal information retention period agreed upon by the information subject or the purpose of processing has been achieved, the personal information may be transferred to a separate database (DB) or stored in a different storage location. and preserve it.
  • The procedures and methods for destroying personal information are as follows. 1)Destruction Procedure
    OKESTRO selects the personal information that requires destruction and destroys the personal information with the approval of the personal information protection manager of <Personal Information Processor>.     2)Destruction Method.
    OKESTRO destroys personal information recorded and stored in the form of electronic files so that the records cannot be reproduced, and personal information recorded and stored in paper documents is destroyed by sharing or incineration.

Rights, obligations and exercise methods of information subjects and legal representatives.

  • The information subject can exercise his/her rights, such as requesting viewing, correction, deletion, and suspension of processing of personal information, at any time against the <personal information processor>.
  • Rights can be exercised against <Personal Information Processor> through writing, email, facsimile (fax), etc. in accordance with Article 41, Paragraph 2 of the Enforcement Decree of the Personal Information Protection Act, and OKESTRO will take action without delay.
  • Rights can also be exercised through an agent, such as the information subject's legal representative or a person authorized to do so. In this case, you must submit a power of attorney in the format of Annex No. 11 of the “Notice on Personal Information Processing Methods (No. 2023-12).”
  • Requests to view and suspend personal information processing may be restricted by Article 35, Paragraph 4 and Article 37, Paragraph 2 of the Personal Information Protection Act.
  • Requests for correction or deletion of personal information cannot be made if the personal information is specified as the subject of collection in other laws and regulations.
  • OKESTRO verifies whether the person making the request, such as a request for viewing, a request for correction or deletion, or a request for suspension of processing, is the person or a legitimate agent in accordance with the information subject's rights.

Measures to ensure the safety of personal information.

OKESTRO is taking the following measures to ensure the safety of personal information.

  • Management measures: Establishment and implementation of internal management plan, operation of dedicated organization, regular employee training.
  • Technical measures: Management of access rights to personal information processing systems, installation of access control systems, encryption of personal information, installation, and update of security programs.
  • Physical measures: Access control to computer rooms, data storage rooms, etc.

Matters related to installation, operation and refusal of automatic personal information collection devices

  • OKESTRO uses 'cookies' to store usage information and retrieve it from time to time in order to provide individualized services to information subjects.
  • Cookies are a small amount of information that the server (http) used to run the website sends to the user's computer browser and are sometimes stored on the hard disk of the user's PC computer. 1)Purpose of Cookie Use:
    Cookies are used to store user preferences, etc. to provide users with a faster web environment and to improve services for convenient use. This allows users to use the service more easily.     2)Installation, operation and refusal of cookies:
    You can refuse the storage of cookies through the option settings in the Tools > Internet Options > Personal Information menu at the top of your web browser.     3)If you refuse to store cookies, you may have difficulty using customized services.

Personal information protection manager and personal information access request

  • OKESTRO is responsible for the overall management of personal information processing, and has designated a personal information protection manager as follows to handle complaints and provide relief for damage from information subjects related to personal information processing.
  • The information subject may request access to personal information pursuant to Article 35 of the Personal Information Protection Act to the department below. OKESTRO will strive to promptly process the information subject's request to view personal information.
    Division Name, etc Contact
    Personal information protection officer Position: CEO
    Name: Kim MinJun, Kim YoungKwang     		Telephone : +82-2-6080-0029
    E-mail : info@okestro.com
    Personal information protection department
    Request to view personal information     		Department Name: Customer Support Center Telephone : +82-2-6080-0029
    E-mail : info@okestro.com
  • The information subject may inquire about all personal information protection-related inquiries, complaint handling, damage relief, etc. that arise while using OKESTRO's services (or business) to the personal information protection manager and responsible department. OKESTRO will respond and process inquiries from information subjects without delay.

How to Remedy for Rights Infringement

OKESTRO guarantees the information subject’s right to self-determination of personal information and strives to provide consultation and relief for damage caused by personal information infringement. If you need to report or consult, please contact the responsible department below.

Grievance handling department
Department name : Management Planning
Person in charge : Cho In-hwan
Contact information: <Phone : 02-6080-0029>, <E-mail : info@okestro.com>, <Fax : 02-6080-0029>

In order to receive relief from personal information infringement, the information subject may apply for dispute resolution or consultation to the Personal Information Dispute Meditation Committee, the Korea Internet & Security Agency’s Personal Information Infringement Reporting Center, etc. For other personal information infringement reports and consultations, please contact the organizations below.

Changes to personal information processing policy

This privacy policy is effective from May 20, 2024.