In order to protect the freedom and rights of information subjects, Orchestra complies with the
Personal Information Protection Act and related laws and regulations to legally process and safely manage personal
information. In accordance with Article 30 of the Personal Information Protection Act, we have established and
disclosed the following personal information processing policy to inform information subjects of the procedures
and standards for processing personal information and to handle grievances related thereto promptly and smoothly.
Purpose of processing, items collected, retention and use period of personal information
Orchestra processes personal data of data subjects as follows
Customers using the home page
| Services |
Purpose of Collection |
What we collect |
Retention and Usage Period |
| Customer inquiries |
To verify inquirers, reply to inquiries, etc. |
[Required] Name, email address, mobile phone number, inquiry details |
3 years after inquiry or until consent is withdrawn
*Stored in accordance with statutory retention periods |
| Performance information statistics and new service development |
Statistics of product/service usage performance information and development of new services |
[Required] Various automatically generated information and service usage records generated during
service use (app usage history, search history, faulty usage history, access logs, cookies), information
such as posts and other content created by the information subject, terminal information (OS/screen size,
device ID), IP address |
for 3 years after the inquiry or until the consent is withdrawn *However, it is kept according to the
statutory mandatory retention period |
| Public Relations and Marketing |
Provision of services and advertisements based on statistical characteristics, and provision of
advertising (customized) information |
[Optional] Name, email address, mobile phone number |
3 years after inquiry or until consent is withdrawn |
| Services |
Purpose of Collection |
| Customer inquiries |
Verify inquirers, reply to inquiries, and more |
| Performance information statistics and new service development |
Product/service usage information statistics and new service development |
| Public Relations and Marketing |
To provide services and deliver advertisements based on statistical characteristics, and to provide
advertising (personalized) information |
| What we collect |
Retention and Usage Period |
| [Required] Name, email address, mobile phone number, inquiry details |
3 years after inquiry or until consent is withdrawn
*Stored in accordance with statutory retention periods |
| [Required] Various automatically generated information and service usage records (app usage history,
search history, bad usage history, access logs, cookies) generated during service use, information such as
posts and other contents created by the information subject, terminal information (OS/screen size, device
ID), IP address |
for 3 years after the inquiry or until the consent is withdrawn *However, it is kept according to the
statutory mandatory retention period |
| [optional] Name, email address, mobile phone number |
3 years after your inquiry or until you withdraw your consent |
Job applicants
| Services |
Purpose of Collection |
What we collect |
Retention and Usage Period |
| Job Application |
To verify the applicant’s identity, conduct and manage the recruitment process, verify experience and
qualifications, determine and notify whether or not to hire, verify past application history, and confirm
the applicant’s intention to apply for further recruitment |
[Required] Name, mobile phone number, e-mail address, date of birth, education, military service, work
experience, foreign language, and other qualifications
[Optional] Photo, reason for applying, and other notes |
(In case of non-recruitment) Up to 3 years after notification of non-recruitment
*But if it is required to be preserved without destruction in accordance with relevant laws and
regulations, up to that period |
| Recruitment Process |
For applicants with special conditions |
Disability status, veteran status, senior status |
| Services |
Purpose of Collection |
| Job Application |
Verify applicant identity, conduct and manage the recruitment process, verify experience and
qualifications, determine and notify employment status, check past application history, and confirm intent
to apply for further employment |
| Recruitment Process |
For applicants with special conditions |
| What we collect |
Retention and Usage Period |
| [Required] Name, mobile phone number, e-mail address, date of birth, education, military service, work
experience, foreign language, and other qualifications
[Optional] Photo, reason for applying, and other notes |
(In case of non-recruitment) Up to 3 years after notification of non-recruitment
*But if it is required to be preserved without destruction in accordance with relevant laws and
regulations, up to that period |
| Disability status, veteran status, senior status |
Whistleblowers
※ You have the right to refuse the collection and use of personal information; however, if you refuse, it may not be possible to submit a report.
※ If the whistleblower does not wish to provide an email address or phone number, the report can still be processed, but updates on progress and results will not be provided.
| Service |
Purpose of collection |
Items collected |
Retention and use period |
| “Clean OKESTRO Report
(Ethical Management Online Reporting Center)” |
Report processing, additional verification of report content if needed, confirmation of receipt, reporting rewards, follow-up actions, issue handling, and other administrative processing |
[Required] Name, report details (title, description, incident details, duration), IP address [Optional] Email, phone number, other submitted files (if entered) |
3 years after the purpose is achieved |
| Service |
Purpose of collection |
| “Clean OKESTRO Report
(Ethical Management Online Reporting Center)” |
Report processing, additional verification of report content if needed, confirmation of receipt, reporting rewards, follow-up actions, issue handling, and other administrative processing |
| Items collected |
Retention and use period |
| [Required] Name, report details (title, description, incident details, duration), IP address [Optional] Email, phone number, other submitted files (if entered) |
3 years after the purpose is achieved |
The following information is stored for a certain period of time and then destroyed according to
the statutory retention period.
| Supporting legislation |
Retention |
Retention period |
| Act on Consumer Protection in Electronic Commerce |
Contract or order cancellation, payment, and supply records |
5 years |
| Consumer complaints or dispute resolution records |
3 years |
| Advertising and display records |
6 months |
| Basic National Tax Act |
Books and supporting documents related to transactions specified in tax laws |
5 years |
| Electronic Financial Transactions Act |
Electronic financial transaction records |
5 years |
| Protection of Communications Secrets Act |
Service visit records |
3 months |
| Credit Information Use and Protection Act |
Records related to the collection, processing, and use of credit information |
3 years |
| Value-Added Tax Act |
Issuance of tax invoices for goods/services received |
5 years |
Provision of Personal Information to Third Parties
※ OKESTRO may share your information with OKESTRO Cloud and OKESTRO AGI for the purpose of receiving and processing ethical management online reports. In this process, personal information is securely managed in accordance with applicable laws and will not be used for purposes other than those specified in this Privacy Policy.
| Recipient |
Provided Information |
Purpose of Provision |
Retention and Usage Period |
| OKESTRO Cloud |
Whistleblower’s name, email address (if provided), phone number (if provided), report details (title, report type, description, incident details, duration, relevant attachments) |
To process “Clean OKESTRO” reports and share information with relevant OKESTRO affiliates |
3 years after the purpose is achieved |
| OKESTRO AGI |
Outsourcing the processing of personal data
- Orchestra outsources personal information processing as follows to ensure the smooth handling of personal
information.
| Custodian (Trustee) |
Entrusted Business |
Retention and Usage Period |
| Stevie Corporation |
Sending and managing emails |
Until withdrawal of membership or termination of consignment contract (consigned only when the user
uses the service) |
- In accordance with Article 26 of the Personal Information Protection Act, when entering into a consignment
contract, Orchestra specifies in the contract and other documents the prohibition of processing personal
information for purposes other than the performance of the consignment, technical and administrative
protection measures, restrictions on re-consignment, management and supervision of the consignee, and
liability for damages, and supervises the consignee to ensure that the personal information is handled safely.
- If the content of the consignment or the trustee changes, we will disclose it through this privacy policy
without delay.
Destruction of personal information
- Orchestra destroys personal information without delay when it becomes unnecessary, such as the expiration of
the personal information retention period or the fulfillment of the purpose of processing.
- If the personal information retention period agreed to by the information subject has expired or the purpose
of processing has been achieved, but the personal information must continue to be retained in accordance with
other laws and regulations, the personal information shall be moved to a separate database (DB) or stored in a
different place.
- The procedures and methods for destroying personal information are as follows:
1) Destruction Procedure
Orchestraselects the personal information for which the reason for destruction
has occurred, and destroys the personal information with the approval of the personal information protection
officer of <Personal Information Processor>.
2) Destruction Method
Orchestra destroys personal information recorded and stored in electronic files so that the records cannot
be reproduced, and destroys personal information recorded and stored in paper documents by shredding or
incineration.
Rights and obligations of information subjects and legal representatives and how to exercise them
- You may exercise your rights to access, correct, delete, or request suspension of processing of your
personal information at any time by contacting <and>.
- The exercise of rights may be made in writing, email, facsimile transmission (FAX), etc. to <personal
information processor>in accordance with Article 41, Paragraph 2 of the Enforcement Decree of the Personal
Information Protection Act, and Orchestra will take action without delay.
- You can also exercise your rights through a representative, such as a legal representative of the
information subject or a person who has been authorized. In this case, you must submit a power of attorney in
the form of Attachment 11 of the “Notification on the Method of Processing Personal Information (No.
2023-12)”.
- Requests for access to personal information and suspension of processing may be limited by Article 35 (4)
and Article 37 (2) of the Personal Information Protection Act.
- A request for correction or deletion of personal information cannot be made if the personal information is
subject to collection under another law.
- Orchestra will verify that the person making the request is the individual or his/her authorized
representative in the event of a request for access, correction, deletion, or suspension of processing in
accordance with the rights of the data subject.
Measures to ensure the safety of personal information
Orchestra takes the following measures to ensure the safety of your personal information.
- Management measures: establishment and implementation of internal management plan, operation of dedicated
organization, regular employee training
- Technical measures: management of access rights to personal information processing systems, installation of
access control systems, encryption of personal information, installation and renewal of security programs
- Physical measures: Access control to computer labs, archives, etc.
Installation, operation and rejection of automatic personal information collection devices
- Orchestra uses ‘cookies’ that store and retrieve usage information from time to time to provide
individualized services to the information subject.
- Cookies are small amounts of information sent to your computer’s browser by the server (http) used to run
the website and are sometimes stored on your PC’s hard disk.
1) Purpose of use of cookies
We use cookies to store your preferences and other settings to provide you with a faster web experience and
to improve our services for your convenience. This makes it easier for you to use our services.
2) Installation, operation and rejection of cookies
You can reject the storage of cookies through the tools at the top of your web browser>Internet
Options>Privacy menu.
3) If you refuse to save cookies, you may experience difficulties in using customized services.
Privacy officers and requests for access to personal information
- Orchestra is responsible for the overall handling of personal information, and designates a personal
information protection officer as follows to handle complaints and damage relief of information subjects
related to the handling of personal information.
- The information subject may request access to personal information pursuant to Article 35 of the Personal
Information Protection Act to the following departments. Orchestra will endeavor to promptly process the
information subject’s request for access to personal information.
| Category |
Full name, etc. |
Contact |
| Privacy Officer |
Title : CEO
Name : Kim Minjun, Kim Young Kwang |
Phone : 02-6080-0029
Email : info@okestro.com |
| Personal Information Protection Department
Personal Information Request |
Department Name : Customer Support Center |
Phone : 02-6080-0029
Email : info@okestro.com |
- The information subject may inquire about all personal information protection-related inquiries, complaints,
damage relief, etc. arising from the use of Orchestra’s services (or business) to the personal information
protection officer and the department in charge. Orchestra will respond to and handle inquiries from the
information subject without delay.
Infringement remedies
Orchestra guarantees the right of self-determination of personal information of the information
subject and strives to provide counseling and damage relief due to personal information infringement, and if you
need to report or consult, please contact the department in charge below.
- Grievance Department
- Department : Business Planning
- Accountants : Sumin Choi
- Contact : <Phone +82-2-6080-0029> <Email info@okestro.com> <Fax +82-2-6080-0029>
The information subject may apply for dispute resolution or consultation to the Personal
Information Dispute Mediation Committee or the Personal Information Infringement Report Center of the Korea
Internet & Security Agency to receive relief from personal information infringement. For other reports and
consultations on personal information infringement, please contact the following organizations.
Changes to your privacy policy
This Privacy Policy is effective as of May 20, 2024.
