Privacy Policy

1. Purpose of Collecting and Using Personal Information

dizwe ("Company" or "Service") processes personal information for the following purposes:

• Provision of services and fulfillment of contracts
• Member management and identity verification
• Handling customer inquiries and complaints
• Service improvement and development of new services
• Utilization for marketing and advertising

2. Items of Personal Information Collected

3. Processing and Retention Period of Personal Information

The Company processes and retains personal information within the retention and usage period prescribed by law or the period consented to by the data subject at the time of collection.

• Until membership withdrawal (except when retention is required by relevant laws)
• Information for preventing fraudulent use: 1 year
• Service usage records: 3 months

4. Provision of Personal Information to Third Parties

The Company does not provide personal information of data subjects to external parties in principle. However, the following cases are exceptions:

• When the data subject has given prior consent
• When required by law or requested by investigative agencies according to legally prescribed procedures and methods

5. Consignment of Personal Information Processing

The Company outsources personal information processing tasks as follows for smooth processing:

6. Rights and Obligations of Data Subjects and How to Exercise Them

Data subjects may exercise the following personal information protection rights at any time:

• Request for notification of personal information processing status
• Request for suspension of personal information processing
• Request for correction or deletion of personal information
• Request for notification of personal information processing status

Rights may be exercised in writing, via email, or fax according to Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and the Company will take action without delay.

7. Measures to Ensure Safety of Personal Information

The Company takes the following technical, administrative, and physical measures necessary to ensure safety in accordance with Article 29 of the Personal Information Protection Act:

• Minimization of personal information handling staff and training
• Restriction of access to personal information
• Access control to personal information through granting, changing, and revoking access rights to database systems storing personal information
• Installation of security programs to prevent leakage and damage of personal information by hacking or computer viruses

8. Personal Information Protection Officer

9. Changes to Privacy Policy

This Privacy Policy is effective from the enforcement date, and if there are additions, deletions, or corrections to changes in accordance with laws and policies, notice will be given through announcements from 7 days before the effective date.

10. Request for Access to Personal Information

Data subjects may request access to personal information in accordance with Article 35 of the Personal Information Protection Act to the department below. The Company will strive to process requests for access to personal information promptly.