1. Purpose of Processing Personal Information

Recycle Ledger Co., Ltd. processes personal information for the purposes listed below. Personal information is not used for any purpose other than those specified. If the purpose of use changes, necessary actions such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act will be taken.

• Member Registration and Management
  Verification of membership intention, identity verification for membership services, maintenance and management of membership qualifications, prevention of fraudulent service use, notifications, and handling inquiries.

• Store Management
  Personal information of store personnel is processed to identify recyclable material generators.

• Provision of Goods and Services
  Personal information is processed for the purpose of providing services.

2. Processing Purpose, Items Collected, and Retention Period

Recycle Ledger Co., Ltd. retains and processes personal information within the period agreed upon by the data subject or as required under relevant laws.

3. Retention Period Under Relevant Laws

The company retains personal information until the purpose of collection is fulfilled. However, if retention is required under other laws, the information will be retained for the period stipulated.
Additionally, when a user requests deletion, information is deleted immediately unless laws require retention for a certain period.

• In cases where preservation is necessary in accordance with relevant laws and regulations, such as the Act on the Protection of Communication Secrets and the Act on Consumer Protection in Electronic Commerce, etc., the Company retains user information for a certain period of time as stipulated in the relevant laws and regulations.

• Records of contracts or cancellations: 5 years (E-Commerce Act)

• Records of advertisements: 6 months (E-Commerce Act)

• Payment and supply of goods: 5 years (E-Commerce Act)

• Records of complaints and dispute resolution: 3 years (E-Commerce Act)

• Access logs, IP information: 3 months (Communications Privacy Protection Act)

4. Provision of Personal Information to Third Parties

The company provides personal information to third parties only with user consent or in cases permitted by Articles 17 and 18 of the Personal Information Protection Act.

5. Destruction of Personal Information

① Personal information is destroyed without delay once the purpose of processing is achieved. The destruction procedures are as follows:

1. Procedure: Information is destroyed upon approval by the Privacy Officer when the retention period expires or the purpose is achieved.

2. Method: Electronic files are permanently deleted; paper documents are shredded or incinerated.

② If retention is required by law even after the retention period ends, the information is stored separately.

6. Outsourcing of Personal Information Processing

The company does not outsource personal information processing to external parties.

7. Measures to Ensure Safety of Personal Information

The company implements the following measures:

1. Administrative
   - Internal management plans, dedicated staff, regular training

2. Technical
   - Access control, encryption, security software

3. Physical
   - Restricted access to server rooms and document storage

8. Use of Cookies

① Purpose of Cookies
Used to provide optimized information based on service usage, visit patterns, search history, secure access, etc.

② Cookie Settings & Rejection
Users can choose to allow or block cookies in their browser settings.

1. Edge: Settings menu at the top right of the web browser > Cookies and site permissions > Manage and delete cookies and site data

2. Chrome: Settings menu at the top right of the web browser > Privacy and security > Cookies and other site data

3. Whale: Settings menu at the top right of the web browser > Privacy protection > Cookies and other site data

4. Internet Explorer: Tools menu > Internet Options > Privacy tab > Set privacy level

9. Rights and Obligations of Data Subjects and How to Exercise Them

① Data subjects may exercise their rights to request access, correction, deletion, and suspension of processing of their personal information from the “Company” at any time.
※ Personal information of children under the age of 14 is not collected.

② In accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, the data subject may exercise these rights through written requests, email, fax, etc., and the Company will take action without delay.

③ These rights may also be exercised through a legal representative or an authorized agent of the data subject. In this case, a power of attorney form in accordance with Form No. 11 of the “Public Notice on Personal Information Processing Methods (No. 2020-7)” must be submitted.

④ Requests to access or suspend the processing of personal information may be restricted under Article 35(4) and Article 37(2) of the Personal Information Protection Act.

⑤ Requests for correction or deletion of personal information may not be accepted if the personal information is required to be collected by another law.

⑥ The Company shall verify whether the person making the request for access, correction/deletion, or suspension of processing is the data subject or a legitimate representative.

10. Appointment of Personal Information Protection Officer

The “Company” appoints the following Personal Information Protection Officer to protect customers’ personal information and handle complaints related to personal data. Customers may submit any personal information–related inquiries or complaints occurring while using the Company’s services to the Personal Information Protection Officer.
The Company will provide prompt and sufficient responses to all customer inquiries. (Including the receipt and processing of requests for access to personal information)

11. Remedies for Infringement of Rights

① Data subjects may apply for dispute resolution or consultation to the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center, etc., in order to seek remedies for personal information infringements. For reporting or consulting regarding any other personal information infringement, please contact the following organizations:

• Personal Information Dispute Mediation Committee: 1833-6972 (no area code) (www.kopico.go.kr)

• KISA Personal Information Infringement Report Center: 118 (no area code) (privacy.kisa.or.kr)

• Supreme Prosecutors’ Office: 1301 (no area code) (www.spo.go.kr)

• Korean National Police Agency: 182 (no area code) (ecrm.cyber.go.kr)

② The Personal Information Protection Commission strives to guarantee the data subject’s right to self-determination over personal information and to provide counseling and remedies for damages caused by personal information infringement. If you need to report or seek consultation, please contact the department below.

▶ Customer Consultation and Reporting Related to Personal Information Protection

③ A person whose rights or interests have been infringed due to a disposition or omission by the head of a public institution in regard to requests made under Article 35 (Access to Personal Information), Article 36 (Correction or Deletion of Personal Information), or Article 37 (Suspension of Processing, etc.) of the Personal Information Protection Act may file an administrative appeal as prescribed by the Administrative Appeals Act.
※ National Administrative Appeals Commission: 110 (no area code) (www.simpan.go.kr)

12. Changes to the Privacy Policy

This policy has been effective since July 25, 2023.
Previous versions of the Privacy Policy can be checked through the effective dates listed above.