Privacy Policy

Article 1 (Purpose)

Mingling (hereinafter referred to as 'the Company') establishes this Privacy Policy (hereinafter referred to as 'this Policy') to protect the information (hereinafter referred to as 'Personal Information') of individuals (hereinafter referred to as 'Users' or 'Individuals') using the services (hereinafter referred to as 'Company Services') provided by the Company, in compliance with relevant laws including the Personal Information Protection Act, the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. (hereinafter referred to as 'the Act on Information and Communications Networks'), and to address complaints related to the protection of Users' Personal Information swiftly and smoothly.

Article 2 (Principles of Personal Information Processing)

The Company may collect users' Personal Information in accordance with the relevant laws and this Policy, and the collected Personal Information may be provided to third parties only with the individual's consent. However, if required by relevant laws, the Company may provide the collected Personal Information of Users to third parties without prior consent from the individual.

Article 3 (Disclosure of this Policy)

1. The Company discloses this Policy through its homepage's main screen or a connecting screen, so that Users can easily verify this Policy at any time.

2. In disclosing this Policy as per paragraph 1, the Company utilizes font size, color, etc., to make it easy for Users to comprehensively understand this Policy.

Article 4 (Changes to this Policy)

1. This Policy may be amended in accordance with changes to laws, guidelines, notices, or changes in policies or contents of government or Company Services related to Personal Information.

2. When the Company amends this Policy pursuant to paragraph 1, it will announce it in one or more ways as follows.

   • a. Announcing through the notice section on the homepage of the Company or through a separate window

   • b. Announcing to Users through written means, facsimile, electronic mail or similar methods

3. Announcements of the changes to this Policy pursuant to paragraph 2 will be made at least 7 days before the effective date of the amendments. However, if there are significant changes affecting Users' rights, an announcement will be made at least 30 days prior.

Article 5 (Information Required for Membership Registration)

The Company collects the following information to register Users for Company Services.

1. Required Collection Information: Email address, name, nickname, date of birth, and mobile phone number

Article 6 (Information for Identity Verification)

The Company collects the following information for Users' identity verification.

1. Required Collection Information: Mobile phone number, name, date of birth, identification value (CI, DI), mobile carrier, I-PIN information (when verifying I-PIN), and nationality status

Article 7 (Information for Providing Company Services)

The Company collects the following information to provide services to Users.

1. Required Collection Information: ID, email address, name, date of birth, and contact number

Article 8 (Information for Service Use and Fraud Prevention)

The Company collects the following information for statistics and analysis related to Users' service usage and for confirming and analyzing fraudulent usage.
(Fraudulent usage refers to acts such as rejoining after withdrawal, repeatedly canceling purchases after buying products, activities aimed at unlawfully obtaining economic benefits from discount coupons and event benefits offered by the Company, acts prohibited by the terms of use, identity theft, etc.)

1. Required Collection Information: Service usage records, cookies, connection information, and device information

Article 9 (Methods of Collecting Personal Information)

The Company collects Users' Personal Information in the following ways.

1. By having Users enter their Personal Information on the Company's homepage

2. By having Users enter their Personal Information through services outside the homepage provided by the Company, such as applications

3. In the course of using the Company's services, such as consultations with the customer center, activities on bulletin boards, etc., by having Users input information

Article 10 (Use of Personal Information)

The Company uses Personal Information in the following cases:

1. When necessary for company operations such as delivering announcements

2. For responses to user inquiries and complaints, and for improving services offered to Users

3. To provide Company Services

4. For taking actions against members who violate laws and company regulations, including limiting the use of services and preventing and punishing acts that disrupt the smooth operation of services

5. For the development of new services

6. For demographic analysis and analysis of service visits and usage records

7. To foster relationships among Users based on Personal Information and interests

Article 11 (Retention and Use Period of Personal Information)

1. The Company retains and uses Personal Information for the period necessary to achieve the purpose of collection and use.

2. Notwithstanding the preceding paragraph, the Company retains records of fraudulent service usage for up to one year from the date of membership withdrawal to prevent fraudulent registrations and usage.

Article 12 (Retention and Use Period of Personal Information According to Law)
The Company retains and uses Personal Information in accordance with the relevant laws as follows:

1. Retention information and period under the Act on the Consumer Protection in Electronic Commerce
   a. Records related to contracts or withdrawal of offers: 5 years
   b. Records on payment and supply of goods: 5 years
   c. Records on consumer complaints or dispute resolution: 3 years
   d. Records on labeling and advertising: 6 months

2. Retention information and period under the Protection of Communications Secrets Act
   a. Website log records: 3 months

3. Retention information and period under the Electronic Financial Transactions Act
   a. Records related to electronic financial transactions: 5 years

4. Protection and use of location information
   a. Records related to personal location information: 6 months

Article 13 (Destruction Principles of Personal Information)
The Company shall destroy Personal Information without delay if it is no longer necessary, such as when the purpose of processing Personal Information is achieved or when the retention/use period has expired.

Article 14 (Destruction Procedures for Personal Information)

1. The information that Users have entered for membership registration or other purposes will be moved to a separate database (in the case of written documents, a separate file) after the purpose of processing is achieved and stored for a certain period due to information protection reasons under internal policies and other relevant laws, and will be destroyed thereafter.
   (During the storage period, Personal Information will not be retained and utilized unless required by law)

2. The Company will destroy other information upon the approval of the person in charge of Personal Information protection.

Article 15 (Methods of Destruction of Personal Information)
The Company will delete Personal Information stored in electronic file formats using technical methods that make records unrecoverable, and printed Personal Information will be destroyed by shredding or incineration.

Article 16 (Measures for Transmission of Promotional Information)

1. When the Company sends electronic promotional information for commercial purposes, it obtains explicit prior consent from the User. However, the Company does not require prior consent in cases that fall under any of the following:
   a. When the Company collects contacts directly from the recipient through trade relationships, and intends to send promotional information for commercial purposes regarding the same products within 6 months of the end of the transaction
   b. When the telemarketer notifies the recipient of the source of Personal Information during a phone solicitation.

2. If the recipient expresses their intent to refuse receipt or revoke their consent for promotional information, the Company will refrain from sending such information and will inform the recipient about the processing outcome of their refusal and withdrawal.

3. When transmitting promotional information for commercial purposes via electronic media from 9 PM to 8 AM the next day, the Company shall receive separate prior consent from the recipient, notwithstanding paragraph 1.

4. When sending promotional information for commercial purposes via electronic media, the Company clearly states the following details in the promotional information:
   a. Company name and contact information
   b. Information on how to express intent to refuse or revoke consent

5. When sending promotional information for commercial purposes via electronic media, the Company shall not take any actions that fall under any of the following:
   a. Actions that evade or obstruct the recipient's intention to refuse or revoke consent for promotional information
   b. Automatic generation of contacts such as phone numbers or electronic mail addresses by combining numbers, symbols, or letters
   c. Automatic registration of contacts for the purpose of sending promotional information
   d. Various measures to conceal the sender's identity or the source of the promotional information
   e. Various measures to deceive recipients into replying for the purpose of sending promotional information

Article 17 (Protection of Children's Personal Information)

1. The Company allows membership registration only for Users aged 14 and older to protect the Personal Information of children under the age of 14.

2. Notwithstanding paragraph 1, if the User is under the age of 14, the Company will obtain consent from the child's legal representative for the collection, use, and provision of the child's Personal Information.

3. In this case, the Company will additionally collect the legal representative's name, date of birth, gender, duplicate registration confirmation information (ID), and mobile phone number.

Article 18 (Inquiries about Personal Information and Withdrawal of Consent to Collection)

1. Users and legal representatives can inquire about or modify their stored Personal Information at any time and request the withdrawal of consent for its collection.

2. To withdraw consent for the collection of their membership information, Users and legal representatives should contact the person in charge of Personal Information protection in writing, by phone, or via electronic mail, and the Company will take prompt action.

Article 19 (Changes to Personal Information)

1. Users may request corrections for inaccuracies in their Personal Information using the methods described above.

2. The Company will not use or provide Personal Information until the corrections are completed, and if incorrect Personal Information has already been provided to third parties, the Company will notify them of the correction outcome without delay to ensure the correction is made.

Article 20 (User Obligations)

1. Users must maintain their Personal Information in an up-to-date state, and they are responsible for problems arising from inaccuracies in the information they input.

2. In cases of membership registration using another person's Personal Information, Users may lose their membership eligibility or face penalties under related Personal Information protection laws.

3. Users are responsible for maintaining the security of their email addresses, passwords, etc., and cannot transfer or loan them to third parties.

Article 21 (Management of Personal Information by the Company)
The Company takes necessary technical and managerial protective measures to ensure that Users' Personal Information is not lost, stolen, leaked, altered, or damaged.

Article 22 (Handling of Deleted Information)
Personal Information that has been terminated or deleted at the request of the User or legal representative is handled according to the retention and use period specified in the Company's collection of Personal Information.

Article 23 (Encryption of Passwords)
The password of Users is stored and managed in an encrypted format, and access to personal information for confirmation or modification can only be currently performed by the individual who knows the password.

Article 24 (Countermeasures against Hacking)

1. The Company makes every effort to prevent the leakage or damage of Users' Personal Information due to hacking or intrusions such as computer viruses.

2. The Company uses the latest antivirus programs to prevent leakage or damage of Users' Personal Information and data.

3. The Company makes every effort to secure its systems using intrusion prevention systems for worst-case scenarios.

4. The Company ensures that sensitive Personal Information (if collected and retained) is transmitted securely over the network using encryption and other communications.

Article 25 (Minimization and Training of Personal Information Processing)
The Company limits the number of personnel involved in processing Personal Information and emphasizes compliance with laws and internal policies through managerial measures such as training for Personal Information handlers.

Article 26 (Measures against Personal Information Leakage)
If the Company becomes aware of the loss, theft, or leakage (hereinafter referred to as "Leakage, etc.") of Personal Information, it will promptly notify the affected Users of all of the following matters and report to the Broadcasting and Communications Commission or the Korea Internet & Security Agency.

1. Items of Personal Information that have leaked, etc.

2. Time when the leakage, etc. occurred

3. Actions that Users can take

4. Response measures taken by the information service provider

5. Departments and contact information where Users can receive consultations, etc.

Article 27 (Exceptions to Measures for Leakage of Personal Information)
If it is justifiably impossible to identify Users' contacts, the Company may replace the notification by posting the notice on its homepage for more than 30 days.

Article 28 (Protection of Personal Information Transferred Abroad)

1. The Company does not enter into international contracts that violate the Personal Information Protection Act and related regulations regarding Users' Personal Information.

2. The Company must obtain User consent for transferring (including querying) or outsourcing the processing or storage of Users' Personal Information abroad. However, if all items of the third paragraph of this Article are disclosed to Users according to the Personal Information Protection Act and related regulations or notified through methods specified by the Enforcement Decree, the Company may forgo the consent procedure for the processing and storage.

3. To obtain consent according to the main text of the second paragraph, the Company must inform Users of all matters listed below in advance:
   a. Items of Personal Information to be transferred
   b. Countries to which Personal Information is transferred, date and method of transfer
   c. Name of the person receiving the Personal Information (for corporations, this means the name and contact information of the person responsible for managing information)
   d. Purpose of utilizing Personal Information and retention/use period by the recipient

4. If the Company obtains consent to transfer Personal Information abroad according to the main text of the second paragraph, it implements protective measures as specified by the Personal Information Protection Act Enforcement Decree and other related laws.

Article 29 (Installation, Operation, and Refusal of Personal Information Automatic Collection Devices)

1. The Company uses cookies, which are automatic collection devices that store and retrieve information from time to time to provide personalized services to Users. Cookies are small pieces of information sent to the User's web browser (including both PC and mobile) by the server (http) that runs the website.

2. Users have the option to choose whether to accept cookies. Therefore, Users may allow all cookies, verify each time a cookie is stored, or refuse to store all cookies by adjusting their web browser options.

3. However, if Users refuse to save cookies, they may experience difficulties in using some services that require login.

Article 30 (Methods of Allowing Cookie Installation)
Cookie allowing or blocking and other settings can be made through web browser options.

1. Edge: Settings menu in the top right of the web browser > Cookies and site permissions > Manage and delete cookies and site data

2. Chrome: Settings menu in the top right of the web browser > Privacy and security > Cookies and other site data

3. Whale: Settings menu in the top right of the web browser > Privacy protection > Cookies and other site data

Article 31 (Designation of the Company's Personal Information Protection Officer)

1. The Company designates related departments and a Personal Information Protection Officer as follows to protect Users' Personal Information and address any complaints regarding such:
   1. Personal Information Protection Officer

   1. Name: Lee Jong-oh

   2. Position: CTO

   3. Phone number: 0233122234

   4. Email: whddh5285@naver.com

Article 32 (Remedies for Infringement of Rights)

1. Data subjects can apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency Personal Information Infringement Reporting Center, etc., to receive remedies for personal information infringement. For other reports or consultations regarding personal information infringement, please contact the following institutions:
   a. Personal Information Dispute Mediation Committee: (No area code) 1833-6972 (www.kopico.go.kr)
   b. Personal Information Infringement Reporting Center: (No area code) 118 (privacy.kisa.or.kr)
   c. Supreme Prosecutor's Office: (No area code) 1301 (www.spo.go.kr)
   d. National Police Agency: (No area code) 182 (ecrm.cyber.go.kr)

2. The Company strives to guarantee the data subject's right to self-determination regarding Personal Information and to address consultations and damages due to personal information infringement. In the case of reports or consultations needed, please contact the responsible department mentioned in paragraph 1.

3. According to Articles 35 (Access to Personal Information), 36 (Correction/Deletion of Personal Information), and 37 (Suspension of Processing Personal Information) of the Personal Information Protection Act, individuals who suffer damage due to omissions or actions taken by the head of a public institution may file an administrative appeal in accordance with the Administrative Appeals Act.
   a. Central Administrative Appeals Commission: (No area code) 110 (www.simpan.go.kr)

Supplementary Provisions

Article 1 This Policy shall take effect from March 19, 2025.