Privacy Policy
Enchant Entertainment (hereinafter referred to as the "Company") establishes and discloses this Privacy Policy in accordance with Article 30 of the Personal Information Protection Act of the Republic of Korea, in order to protect the personal information of data subjects and to handle related grievances promptly and smoothly.
This Privacy Policy applies to the creator management, advertising, marketing, digital content production, and e-sports planning services (hereinafter referred to as the "Services") provided by the Company.
Table of Contents
- Purposes and Items of Personal Information Collected
- Retention and Use Period of Personal Information
- Provision of Personal Information to Third Parties
- Entrustment of Personal Information Processing
- Processing of Personal Information of Children Under 14
- Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them
- Destruction of Personal Information
- Measures to Ensure the Safety of Personal Information
- Installation, Operation, and Refusal of Cookies
- Personal Information Protection Officer and Grievance Handling Department
- Remedies for Infringement of Rights
Article 1 (Purposes and Items of Personal Information Collected)
The Company collects personal information as described below to provide the Services smoothly. The collected information will never be used for any purpose other than the purpose for which it was originally collected. If the purpose changes, the Company will provide advance notice and take the necessary measures in accordance with applicable laws.
The personal information collected is divided into required items necessary to use the Services and optional items used to provide additional benefits.
1. Required Items
This information is essential to provide the core functions of the Services offered by the Company.
1-1. Items Collected with the Data Subject's Consent
This is information that the data subject enters directly or agrees to provide while using the Services offered by the Company.
| Purpose of Collection and Use | Legal Basis | Items Collected |
|---|---|---|
| Creator management | Article 15(1)1 of the Personal Information Protection Act | Name, date of birth, contact information, email address, activity name (channel name), and channel information |
| Conclusion of creator management agreements | Article 15(1)1 of the Personal Information Protection Act | Name, contact information, address, and email address |
| Customer and business inquiries | Article 15(1)1 of the Personal Information Protection Act | Name, contact information, and email address |
1-2. Items Collected Without the Data Subject's Consent
This information is collected without the data subject's consent under applicable laws in order to comply with legal obligations or perform a service agreement. In addition, IP addresses, access logs, service usage records, and device information may be generated and collected automatically during use of the Services to manage service usage records, prevent misuse, and provide the Services reliably.
| Purpose of Collection and Use | Legal Basis | Items Collected |
|---|---|---|
| Tax reporting and settlement | Article 15(1)2 of the Personal Information Protection Act and Article 85-3 of the Framework Act on National Taxes | Name, resident registration number (or business registration number), copy of identification, and bank account information (account holder and account number) |
2. Optional Items
This information is collected to provide additional benefits, such as event participation and marketing. Data subjects may use the Company's basic Services in the same manner even if they do not consent to the optional items.
When conducting events and promotions, the Company may collect personal information within the scope of the items specified below for purposes such as prize delivery.
The personal information actually collected may vary depending on the nature of each event and the type of prize. When a data subject enters an event, the Company will provide notice of the specific items to be collected through lawful procedures and collect them only after obtaining separate prior consent.
| Purpose of Collection and Use | Legal Basis | Items Collected |
|---|---|---|
| Prize delivery events | Article 15(1)1 of the Personal Information Protection Act | Name, mobile phone number, delivery address, and email address |
| Recruitment | Article 15(1)4 of the Personal Information Protection Act | Name, date of birth, gender, mobile phone number, nationality, photograph, email address, education and employment history, military service information, disability status, and information provided directly by the applicant during the recruitment process |
Note: If a prize exceeds KRW 50,000, the Company may need to collect unique identification information (resident registration number) to report taxes and public charges under applicable laws. For details, refer to [Tax reporting and settlement] in this Privacy Policy.
Article 2 (Retention and Use Period of Personal Information)
The Company retains and uses personal information only for the period to which the data subject consented at the time of collection or for the period specified by applicable laws. The specific retention and use periods for each category are as follows.
1. Creator Registration and Management Information
- Retention period: Until termination of the service agreement
- Legal basis for retention: Article 15(1)1 of the Personal Information Protection Act
2. Event Entry and Prize Fulfillment Information
- Retention period: 90 days after the event ends and prize delivery is completed
- Legal basis for retention: Article 15(1)1 of the Personal Information Protection Act
3. Information Related to Contracts or Withdrawal of Offers
- Retention period: 5 years after termination of the contract
- Legal basis for retention: Article 6 of the Act on Consumer Protection in Electronic Commerce, Etc.
4. Tax and Accounting Evidence, Including Tax Invoices
- Retention period: 5 years
- Legal basis for retention: Article 85-3 of the Framework Act on National Taxes
5. Records of Payment and Supply of Goods, Etc.
- Retention period: 5 years
- Legal basis for retention: Article 6 of the Act on Consumer Protection in Electronic Commerce, Etc.
6. Website Inquiry Information
- Retention period: 3 years
- Legal basis for retention: Article 6 of the Act on Consumer Protection in Electronic Commerce, Etc.
7. Website Visit Records
- Retention period: 3 months
- Legal basis for retention: Article 41 of the Enforcement Decree of the Protection of Communications Secrets Act
Article 3 (Provision of Personal Information to Third Parties)
The Company processes personal information only within the scope specified in Article 1 and, in principle, does not provide the personal information of data subjects to third parties. The Company provides personal information to third parties only where the data subject has separately consented or where permitted by special provisions of law, including the circumstances set forth in Articles 17 and 18 of the Personal Information Protection Act.
Article 4 (Entrustment of Personal Information Processing)
The Company does not currently entrust the processing of users' personal information to any third party. If the Company entrusts the processing of users' personal information in the future to improve the Services, it will provide advance notice and manage the entrusted party through an entrustment agreement or other appropriate means.
Article 5 (Processing of Personal Information of Children Under 14)
The Company obtains consent from a legal representative when collecting the personal information of a child under 14.
To obtain consent, the Company may collect the minimum information necessary, such as the legal representative's name and contact information, and verifies the lawful legal representative through methods such as mobile phone identity verification or confirmation of consent by email or text message (SMS).
Article 6 (Rights and Obligations of Data Subjects and Legal Representatives and How to Exercise Them)
Data subjects may exercise their privacy-related rights against the Company at any time.
- Request to access personal information
- Request to correct errors, etc.
- Request for deletion
- Request to suspend processing
Rights may be exercised against the Company in writing, by email, by facsimile (FAX), or by other means pursuant to Article 41(1) of the Enforcement Decree of the Personal Information Protection Act. The Company will take action without delay and within 10 days of receiving the request.
When a data subject requests correction or deletion of personal information due to errors, etc., the Company will not use or provide the personal information in question until the correction or deletion is completed.
Rights may also be exercised through the data subject's legal representative or an authorized agent. In such cases, a power of attorney in the form prescribed by Annex 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
Article 7 (Destruction of Personal Information)
The Company destroys personal information without delay when it becomes unnecessary, such as upon expiration of the retention period or achievement of the purpose of processing. However, where personal information must continue to be retained under another law, the Company stores it separately by transferring it to a separate database (DB) or using a different storage location.
1. Destruction Procedure
The Company selects personal information for which a reason for destruction has arisen and destroys it upon approval from the Company's Personal Information Protection Officer.
2. Method of Destruction
- Electronic files: destroyed using technical methods that prevent recovery and reproduction
- Paper documents: destroyed by shredding or incineration
Article 8 (Measures to Ensure the Safety of Personal Information)
The Company takes the following measures to ensure the safety of personal information.
- Administrative measures: establishment and implementation of internal management plans and regular employee training
- Technical measures: management of access permissions, installation of access control systems, encryption of unique identification information, and installation of security programs
- Physical measures: access controls for computer rooms, data storage rooms, and similar facilities
Article 9 (Installation, Operation, and Refusal of Cookies)
The Company uses cookies that store and periodically retrieve usage information in order to provide individualized services to data subjects.
1. Purpose of Cookie Use
- Improvement of the Services by analyzing data subjects' access frequency, visit times, and similar information
- Provision of personalized information through analysis of website usage patterns
2. Installation, Operation, and Refusal of Cookies
Data subjects may refuse the storage of cookies through their web browser settings. However, refusing cookies may make some Services difficult to use.
Data subjects may configure settings such as allowing or blocking cookies through their browser options.
|
< How to Allow or Block Cookies >
▶ Allowing or blocking cookies in a desktop web browser
|
Article 10 (Personal Information Protection Officer and Grievance Handling Department)
Data subjects may use the contact information below for any privacy-related inquiries, complaints, or requests for relief arising from use of the Services.
| Personal Information Protection Officer | Grievance Handling Department |
|---|---|
|
Name: Kim Dong-ju, Director Email: privacy@enchantenter.co.kr |
Department: Technology Team Email: privacy@enchantenter.co.kr |
Article 11 (Remedies for Infringement of Rights)
Data subjects may apply for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency, or other relevant organizations to obtain relief from personal information infringement.
- Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)
- Cyber Bureau of the National Police Agency: (without area code) 182 (ecrm.cyber.go.kr)