nkyber (hereinafter referred to as the "Company") establishes and discloses the following personal information processing guidelines to protect the personal information of data subjects and handle related grievances promptly and smoothly in accordance with Article 30 of the Personal Information Protection Act.
- Article 1 (Purpose of Processing Personal Information)
-
The Company processes personal information for the following purposes. The personal information being processed will not be used for purposes other than the following, and if the purpose of use changes, necessary measures will be taken, such as obtaining separate consent in accordance with Article 18 of the Personal Information Protection Act.
-
1. Providing responses to investment inquiries and consultation inquiries on the website and managing their status
- Article 2 (Processing and Retention Period of Personal Information)
-
-
1. The Company processes and retains personal information within the personal information retention and use period stipulated by law or agreed upon when collecting personal information from the data subject.
-
2. The processing and retention period is as follows:
- Within 3 years from the date of receipt of website customer inquiries
- Article 3 (Provision of Personal Information to Third Parties)
-
-
The Company uses personal information within the pre-notified scope and does not disclose personal information externally or use it beyond this scope without the prior consent of the data subject. However, the following cases are exceptions:
- When the data subject has given prior consent
- When required by law or when there is a request from investigative agencies in accordance with procedures and methods prescribed by law for investigation purposes
- Article 4 (Outsourcing of Personal Information Processing)
-
-
In principle, we do not outsource the processing of personal information without the user's consent. However, the Company may outsource personal information management to other companies within a limited scope for smooth and enhanced customer service. When outsourcing, we will notify through notices and privacy policy about the outsourcing contractor, outsourcing work content, outsourcing period, outsourcing contract details (compliance with personal information protection laws, prohibition of third-party provision of personal information and liability), and safe management of personal information, and obtain prior consent when necessary.
- Article 5 (Rights and Obligations of Data Subjects and Methods of Exercise)
-
-
1. Data subjects may exercise the following personal information protection-related rights to the Company at any time:
- Request to view personal information
- Request for correction in case of errors
- Request for deletion
- Request to stop processing
- 2. Rights under Paragraph 1 may be exercised in writing, by telephone, or email to the Company, and the Company will take action without delay.
- 3. When the data subject requests correction or deletion of errors in personal information, the Company will not use or provide such personal information until the correction or deletion is completed.
- 4. The rights under Paragraph 1 may be exercised through a legal representative or delegate with power of attorney. In this case, a power of attorney according to Form No. 11 of the Enforcement Rules of the Personal Information Protection Act must be submitted.
- 5. The data subject shall not infringe upon the personal information and privacy of themselves or others being processed by the Company in violation of relevant laws such as the Personal Information Protection Act.
- Article 6 (Personal Information Items Being Processed) The Company processes the following personal information items:
-
-
1. Providing responses to website customer inquiries and managing their status
- Required items: Name, Contact information (phone number, email address), Company name
-
2. The following personal information items may be automatically generated and collected during internet service use:
- IP address, cookies, MAC address, service usage records, visit records, malicious use records, etc.
- Article 7 (Destruction of Personal Information)
-
-
1. The Company destroys personal information without delay when it becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose
-
2. The procedures and methods for destroying personal information are as follows:
- Destruction procedure
The Company selects personal information for which destruction reasons have occurred and destroys it with the approval of the Company's personal information protection officer.
- Destruction method
Personal information printed on paper is destroyed by shredding or incineration. Personal information stored in electronic file format is deleted using technical methods that prevent recovery of the records.
- Article 8 (Measures to Ensure Safety of Personal Information)
-
- The Company takes the following measures to ensure the safety of personal information:
- 1. Administrative measures: Establishment and implementation of internal management plans, regular employee training, etc.
- 2. Technical measures: Management of access rights to personal information processing systems
- Article 9 (Installation, Operation, and Rejection of Automatic Personal Information Collection Devices)
-
- 1. The Company uses 'cookies' that store and frequently retrieve usage information to provide individualized customized services to users.
- 2. Cookies are small pieces of information sent by the server (http) operating the website to users' computer browsers and may be stored on users' PC hard drives.
- 3. Purpose of using cookies: They are used to provide optimized information to users by understanding visit and usage patterns, popular search terms, secure access status, etc., for each service and website visited by users.
- 4. Installation, operation, and rejection of cookies: Cookie storage can be rejected through option settings in the Tools > Internet Options > Privacy menu at the top of the web browser.
- 5. If cookie storage is rejected, there may be difficulties in using customized services.
- Article 11 (Remedies for Rights Infringement)
-
- Data subjects may inquire about remedies and consultation regarding personal information infringement at the following institutions. (The following institutions are separate from the Company, and if you are not satisfied with the Company's own personal information complaint handling and damage relief results, or need more detailed help, please inquire)
-
1. Personal Information Infringement Report Center (operated by Korea Internet & Security Agency)
- Jurisdiction: Report of personal information infringement, consultation request
- Website: privacy.kisa.or.kr
- Phone: (without area code) 118
- Address: Personal Information Infringement Report Center, 3rd Floor, 9 Jinheung-gil, Naju-si, Jeollanam-do (301-2 Bitgaram-dong) 58324
-
2. Personal Information Dispute Mediation Committee
- Jurisdiction: Personal information dispute mediation application, collective dispute mediation (civil resolution)
- Website: www.kopico.go.kr
- Phone: (without area code) 1833-6972
- Address: 12th Floor, Seoul Government Complex, 209 Sejong-daero, Jongno-gu, Seoul (03171)
-
3. Supreme Prosecutors' Office Cybercrime Investigation Division: 02-3480-3573 (www.spo.go.kr)
-
4. National Police Agency Cyber Security Bureau: 182 (cyberbureau.police.go.kr)
- Article 12. Changes to Privacy Policy
-
-
This privacy policy will be effective from September 12, 2025.
